Order_ APRL 310377FIBA00541·PDF[.]scr[.]exe | Triage

Sharing

General

Target

Order_ APRL 310377FIBA00541·PDF.scr.exe
Size

1.6MB
MD5

fdaf9f0b8f08dd76f9093aebe4f605cb
SHA1

fee0b5bed3425667da20dbca9ff7b8a7a9f15a4c
SHA256

c7ab9ad2713d8592d9a8a376632e1aea58652a6dac48cbbcc9003d6a73952a3b
SHA512

684fdbf3ff821985382d9bebcec1e6b194f39fbdcedde0dcabfe3ec09629f7fd617155d0379c9a46c3eb6952436ad41aec30ab862acab1bae1d75900a6e301b0
SSDEEP

24576:KsKdMcaIsLAsHJiV7AEX3aymxcD4qVrcBZLeLdncofSYVTI/DN:KwcmEH9D28Bc1fN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Order_ APRL 310377FIBA00541·PDF.scr.exe

Files

Order_ APRL 310377FIBA00541·PDF.scr.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ