Shipping documents and BL[.] PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipping documents and BL. PDF.exe
Size

828KB
MD5

e24cfcdd72282a10aee82ff056a83ad2
SHA1

a014fb99b275a15dd5b0908f218362fc783b4794
SHA256

b921e7134e8ad218e90ad88491c0135ab7c00d5557c9781aea69de52c5d99207
SHA512

c61da798e96a93f2ae63ddbae61b5dba68397a1f1f0973acd8fb4b717583167c55a774e46fdde1732e0d4bf0c4ee5d9ae0c4dae85187768407909e4b89f5980f
SSDEEP

12288:Mrk3iFABfUndhZvSe51oyV6P46tsBSMHBiLV6VTVn009C9/5:FquUTNSe5VottMHyVyFt9g

Score

N/A

Malware Config

Signatures

Files

Shipping documents and BL. PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 640KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ