belgeyitara-pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

belgeyitara-pdf.exe
Size

1.3MB
MD5

3c7563f6d0685a7ebb10b9c9fbef26ac
SHA1

9306eed5fc868e120cc1362725b098728ad55d01
SHA256

c24d74b011bfd25eb0195ff8d16b2f0f48ce7bce49cbba281bb5795eda4f87ec
SHA512

723e1a0877d8980199710c71dd6a5ffe03947fb6a54be6a69c2e83032f922e7919ef93e8e92a4bae0fabc008daf6256b4df296440217f51010c099515fc7dbb3
SSDEEP

24576:0sxsZtEc2ZVg9bOBtdrFE0k3gP7cyKSUyer:/i7YVg96BzrFtk3gPrK9ye

Score

N/A

Malware Config

Signatures

Files

belgeyitara-pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ