PURCHASE ORDER-34002174,pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PURCHASE ORDER-34002174,pdf.exe
Size

91KB
MD5

e8efe98153e26277066ef7386735cf73
SHA1

f9f3e5e8d07d1c66f510bac3a6dec5c396b9d639
SHA256

b24fbc3057f54fc0facdd4da5d0a4e4a340af76a32fdc2074cd7545838a0db08
SHA512

778c34c3a7bb891d523d000588281dfea20f71e86390c8c784e28d8f68a95dc81dad84deb9151b73de4425574b5ce9bd106634654c54d952bef6ee0e2225e9b2
SSDEEP

1536:PMM8BNRIOkzRv+iu65jDLt6EXL42TJXrlrurqyHpJBglo7Qjm9nDhPTHOmVcl:mzk3D5jvtBE2BBrgvpJCIZBhPLO8Y

Score

N/A

Malware Config

Signatures

Files

PURCHASE ORDER-34002174,pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ