PO[.]41022[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO.41022.pdf.exe
Size

1.1MB
MD5

611cac35588e905fd549327d435c80fb
SHA1

f6871a3d076f654bd444ddb5b463ae59751c2236
SHA256

714e4e1608cc5486e6ebbb112c3dda90ce2398d346539ef636adb31d5268ee58
SHA512

2a947a119e143898dafae97eb353bdb18b192a27bcc1fdc224c3960e234fc4a29bdc0606cc53006eca3315665af072bba9542b0858a19b2dc7b20a3d7633fbe6
SSDEEP

12288:sfaK4HTNwJ8KROwE4n332sIxfc3jnTVtjtTLnDTOBPtJ/WzAw+HUzPIvuUa6XyGx:IBFF2sJznT7tfXODJxt0zgWyzWhj

Score

N/A

Malware Config

Signatures

Files

PO.41022.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ