Documentos[.]exe | Triage

Sharing

General

Target

Documentos.exe
Size

53KB
MD5

ecddf2614e50251fdbea5ff7f9f5a1d0
SHA1

44da5d708c1fdd66251f8cfe0e634ef40081a608
SHA256

6fa650ce13d6af2de198d27c1dae56d62f53bfa5f570eba1ba9bf5b26074db7c
SHA512

741b07b96e3ee295182799a8ac2ee91a2b389e0af0cc97b60813dfed35dc16b5daaff94ff3c69d280b33f2d8bbb15dd13d9ab5dc5ec23e89e3971914e3f6ea6c
SSDEEP

768:TOuD+Bk8PS/XCWdTKzX6C8C6aErKyrOkixg3nsdQN6weFhHvYe7dCunb/gf3YsI6:sB5YrCdHlb/gf3fIxVm60DhgrGGY0R8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Documentos.exe

Files

Documentos.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ