AA20230216- ENQUIRY[.]PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AA20230216- ENQUIRY.PDF.exe
Size

618KB
MD5

8ef04324c4fe323c668eb2570cc7a3d7
SHA1

682f82caa28d1a1be62422ffa70bff717303c8f6
SHA256

b32cc04bda614e747fd4a33813c26e46a2aaa34e67e355f244a68ff9125eda8f
SHA512

a6bdc034f5e497badbe885473ec7b593b47123f9763b78ab040c228e79b0f99603022049055e42553249530d68cab3700344773dfe4bfb616b5811f90278ecdf
SSDEEP

12288:y3/yPNgJhQp9/rU/kdR89/Tl+gx4uUgivkweOgWcWTY:Blgv0Bd0hnzis2gGE

Score

1^/10

Malware Config

Signatures

Files

AA20230216- ENQUIRY.PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ