Purchase Order PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Purchase Order PDF.exe
Size

943KB
MD5

fc4bef70dbd745248227567659e01bc9
SHA1

cb0769bb48a4b0de4249bd214d289b05be1bd8fe
SHA256

5af982e3e7bfb72f09c58c942243bda454f917bc5e0a5b048e579b2c5faa1085
SHA512

290aa61eab334d01575a82ed0cb879c93900132724a9e640e902916de1d4f1e262e0c81310563a2ab0099d62d18e90e50e5da780755f549a570d493bc78de518
SSDEEP

24576:Y1xfsuJFYnWWd9Agg4lqK3gKmi5Tb7io0:Yzfsfnj9AgpwKmATbWp

Score

1^/10

Malware Config

Signatures

Files

Purchase Order PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 941KB - Virtual size: 940KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ