S009892823055402_20230516,PDF[.]exe | Triage

Sharing

General

Target

S009892823055402_20230516,PDF.exe
Size

593KB
MD5

a24fab0aebf29ddaa784613ca315b518
SHA1

85f2b6bb9bdd2c6803f2dd80187d1b052125efe6
SHA256

1aff0eb2eee6fe5d70d00aee2db2f30cea5167c64ea80369eaaffc39c7e654f8
SHA512

06b5fb4ff7e124582f490649769e8f8dcfcbf432de2bdea3353b97b70bf7c75406578173b77fe1c3090659f161a9c903da88171096737d4a76d8283407d4d79b
SSDEEP

12288:oSYnFv5MGMt2NydjO+RkJxUaPbPIXY3ONPNBeohsaWm:pIV0tdjDCffbCY3OdOG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
S009892823055402_20230516,PDF.exe

Files

S009892823055402_20230516,PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 589KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ