PO[.]171022[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO.171022.pdf.exe
Size

2.3MB
MD5

350237533892d130f9c8b22adc5fd392
SHA1

777f43b2eacd7ea1b1c195c6cb740e46d463abca
SHA256

8e8710fff401aa0a0280c0f247d3f738ea01c1ec493b3b275bb41334c8b2e31c
SHA512

69e3e86430b01c532868bc530988e13d2eeb4eebf44f192a43e33c71aaf024d11f0dcb9b47556a7c0227ea4cb364abf15bb82a7cc93de35f17de003af4aa7e6a
SSDEEP

49152:b5UBNk9HifVF/4ac27MiPOs4XrPV5tmIha3A6rwzl0KhTddU:b5ULMEeacSMiWV7mWaCzbhT

Score

N/A

Malware Config

Signatures

Files

PO.171022.pdf.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ