Tender Doc1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Tender Doc1.exe
Size

208KB
MD5

933cf19204b2c1588f42e454e87e896e
SHA1

62126927224a69a1529ff6b915e76bf5cf65c741
SHA256

fbb2eb7637f5af21d3166ee3b7d67e6c2bb6bd833e76f7bc3f842d5534b06f6b
SHA512

55765dc4acee9d73da241d213c9a7ac0dbacf2cd51e63c5ecce360470777ca4d6442fb558e294453895b8c860a1b7bf742162173ae8a85b523eb56f5c0a7746b
SSDEEP

1536:HnDup3S3fgpf/m349/14slbEkjxIqoeryAgNs+GjJxM3CEF/7GmqbMY7usiY9hk1:H5Yf/m349X2kdIqO/TG07GmCMY7pdk1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Tender Doc1.exe

Files

Tender Doc1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

VCXBN34223.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ