t1439 rev00[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

t1439 rev00.pdf.exe
Size

792KB
MD5

63e0c043faff17a793aa9ff6a04cea2a
SHA1

356a332097f63cbf4a2e4177b14a081fb5d399a6
SHA256

2eb68d9acd4f3bf8816e682b1c87234e909cd8f1d53bc4d6df8a0acb74daea52
SHA512

601070af152aa7e2f432ff4b5825a22f1841313fb04f9c79150f18c0e56a0b59910101991ab41351ff637c10179e26e0c483074c62c4afa276f6072bc7c38765
SSDEEP

12288:sFnvTWZzgnufrXtvwyTE82loQn55gIyYcPHMfSm:8yZzgEv7qJSHMf

Score

N/A

Malware Config

Signatures

Files

t1439 rev00.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 778KB - Virtual size: 777KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ