Bill No[.] SFSAH24-23-394 PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Bill No. SFSAH24-23-394 PDF.exe
Size

882KB
MD5

ebb1e4da68836326013efc9c468a4294
SHA1

2430b0940aabcfb61121d23ce1536cb39bb9b747
SHA256

23af85d9373c400f00f17590112f4545c9a522427bf6e1de80dcb028b8538bbd
SHA512

91d71f219c3dfbfaf284d23c2c538d62f663f38a123ab43001175b83cb6c9ad54894b2ee29637e36549d643fd44a3c2dd21630bd3183bc089b622205d8e2f293
SSDEEP

24576:EBBZvWgK7pND3ZoY7kNAza6HJxjoKRxlHlpu790G:GVWgK7XD3ZoY7bXzE+lHlpa0

Score

1^/10

Malware Config

Signatures

Files

Bill No. SFSAH24-23-394 PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 880KB - Virtual size: 879KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ