PO2023#PREORDER[.]PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO2023#PREORDER.PDF.exe
Size

1.2MB
MD5

6dc73b6fb9cff6aeb0dd9fa20afe1039
SHA1

aeaeb7e3627cca848578ea3b52c01aabc2872084
SHA256

06bb6b0d9391858906390cbd9c5e90fcdae91b350e073ddc876d8aea4b9e3f46
SHA512

42769355281852940a2c1f459a05f587e84deab085d9bb6b7c9907e75bfa87794f6a0d96a268b627a57ed8d67b35ddd9b9cdcb05d8514b8288251c78be3459a3
SSDEEP

12288:pzou0KATw1ONUDhs96c7nj+gsG2ONVJcZQe0xckMr7Q2dcLZpdWXDzIcr/8kPB+F:pzbpATSsEhs96c7nj+y/Cx0lMr7QOFR

Score

1^/10

Malware Config

Signatures

Files

PO2023#PREORDER.PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ