NBP23030072-RFQ[.]pdf[.]lz[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NBP23030072-RFQ.pdf.lz.bin
Size

503KB
MD5

95696a08ef18df36cf07d50a846ac460
SHA1

ae94c29d819f7d68f3b96381d51095fd871726d1
SHA256

b1db53b341082b6418c63a7ff3c7effab85907b183c79140f5be57c5fa7a576d
SHA512

7286b3a9db2376cb5308a8a41e266ff00dc226e64892477374fad95a15b2d4f269088f035043b7ee24b3dc9697a524ece442c8ad927c5b19cf683658760bd15f
SSDEEP

12288:BlRf4KgsZOcJejjpq99PzUmHpDOE6V0dox+IGd:xP5OcJKjY9pzy0dokVd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NBP23030072-RFQ.pdf.exe

Files

NBP23030072-RFQ.pdf.lz.bin
.rar
NBP23030072-RFQ.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 647KB - Virtual size: 647KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ