PDA[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PDA.exe
Size

695KB
MD5

ae3296461d486c9a03f191d91ec38a56
SHA1

ef51bf1d3798fdcc4e124eec29a6fb24989040f2
SHA256

38eb61d29ccf5e2246ca870bc6dd624ed7c36cc0dff688ecfa4d7d37a89d5793
SHA512

ae9611816b12916d9447e44d686ccde876572011812bbfb78b5004d590568cfbab872cbff1208e84e878a93b111e9623afe3f733ef7c468d039a51f7d2d8c278
SSDEEP

12288:NbSJgvmlikeeQ79/EDskJVVJoxpcgyahuoOzPXuWuNGuN:NbSJgvmlikA5MDskJz6yahuouPu7NGu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PDA.exe

Files

PDA.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 688KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ