PURCHASE-pdf[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PURCHASE-pdf.gz
Size

829KB
MD5

0efd7b1b588e4dc395d43e29e073357e
SHA1

8dd5d2b3bd1971af595e26e4df4e1ff5de0d1fc0
SHA256

531b31dd762cd09ecf6954211abff9e2f8c7fc31f1d528e2a677b09df865c0f8
SHA512

3ae404fbc8bc4cdba0bb146fdb1b3b90c554e437ac62cb029f7e467a587aa8ec3f19fc260b688c0626a216411926e3e2b63f1d1a630040da4dcbd3f034754ee5
SSDEEP

12288:OAKRP5GhmVE3KjFtZ0vl5x9mBOrk29LjpVV7DaPRhTyLNjNJyYwK9DMQrMXHU4Jf:OAKRIm+3/vS2vLVvmPHGx2YmQwXrf

Score

1^/10

Malware Config

Signatures

Files

PURCHASE-pdf.gz
.rar
PURCHASE.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 940KB - Virtual size: 939KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ