RFQ 18757 FOR CPUW-1022601_Pdf__[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ 18757 FOR CPUW-1022601_Pdf__.exe
Size

1.0MB
MD5

9841ea840eb4c5c2e761b161fa0b7ecc
SHA1

447792f56ffa0a4d570d9b367837fbacbb57c450
SHA256

f281fed414237c484d936802d8bc112995ba6df5c9485207a284b8fc31edf2e6
SHA512

b7e58ac2eee1bf820fce242fdc7d728131904a67ad0dda16bb7cc2133072eaed3c1ae77d6729dc8fbf7e94b7508dcfaa4e9da33f8b8215cda0fbe7bcdfa1e79f
SSDEEP

12288:1S6199Xe8b9ce0kxZf+IF22gMvoBoppQPYwZapxWui4bYzk6LfK1Gg0G4:t1Xu8SP8ZRlvoB+M7ZajWuwzXf8GFG

Score

N/A

Malware Config

Signatures

Files

RFQ 18757 FOR CPUW-1022601_Pdf__.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ