KP20221110[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KP20221110.pdf.exe
Size

933KB
MD5

ed4e3c0d723f93ae87659f5144223301
SHA1

e62333d26296537d869a8e6d929bf5cb87d720a5
SHA256

b502ce5bdf6d7ca5ef654b5d5c4e878c76a308fb0b624ef9b223168454eb65e2
SHA512

0618d8273f076de16ec3d8ed8baf5a99ace81509405775e6826e430b29963895f721d34f2c9b15c84644c673d9871d59938006c58526afd63be8d01a81fcb6f2
SSDEEP

12288:ldwmiLKshZS4SlL0y2dIHAYRMcTYLyVBafQrHFKiAQSQy4AI:QL5Ty2CycTuyVBaIrXAtQy4A

Score

N/A

Malware Config

Signatures

Files

KP20221110.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 925KB - Virtual size: 925KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ