Purchase orderAgreement[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Purchase orderAgreement.pdf.exe
Size

686KB
MD5

97b1cd0270b8e8c6891fb5305809e4a6
SHA1

382f1235eefbc259fabd934546e6c6522918cfed
SHA256

0fc7d652b6fdeb252920589cd09eee181301822f0456bc62d8f298a6bdf6f8ce
SHA512

8f68bcec8db4d6ce1a2324c9beb2f58abb7cf24c6a956812b9eac9d9d970e217fde8a1393725a5700ad259ad557ee297e5fdb7a79a71c21051c3d5c74f3fb72e
SSDEEP

12288:6fMmYMUnFW/N/wNxFwbHizqzjIUwCfqrPYgNhQLxBteiQcMnYMi/bb:6fMUKNH8Hizq3pBqr72xBtEcRMIb

Score

1^/10

Malware Config

Signatures

Files

Purchase orderAgreement.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 681KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ