DOC030222-03022022133454[.]exe | Triage

Sharing

General

Target

DOC030222-03022022133454.exe
Size

553KB
MD5

4b6a4185deab6ab773c385544348ad2d
SHA1

063ce8ac9989d729ee476f05dc4b4ca0e4683d36
SHA256

c7a131685f4235140da8b3310a3d1816527268ba1cd788b24e5011b572eaf9a3
SHA512

0a79a552bebef3006492e3501458222d099c5968599e819827dce321872da2cce1a1fcaf7d603c96083c9214671f35dac6fcd63a98871f74ce61bab8b9cdf6ea
SSDEEP

12288:T6Z6wR7njY2nH1TjZhqxXo7qyzTwHHyxeB7nk80OS:mZ6wNjLHBj7qxXoGQwHHrBTF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DOC030222-03022022133454.exe

Files

DOC030222-03022022133454.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

YbVb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 551KB - Virtual size: 550KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ