Yangi xarid buyurtma pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Yangi xarid buyurtma pdf.exe
Size

902KB
MD5

69078d32d9c984c300e2b2e270f2cd6f
SHA1

c0475d7c47bae96aa5421817d7b6af4ec70ff2ca
SHA256

0555b2be69a7f5ef1a4b3948af343d22ddf3d5e1b21be20f8f9b9151c04d2a6c
SHA512

e7be945e3b8bd9b6b6921e261c2f7da3ee2b44da67e95daa131fef31736af301c3cd044dfcf565cba6940cc5350298096a01cf395e043815448becd517f35d06
SSDEEP

24576:kYaH8C0wjY54jQQd7N1taRAHdYeWoAi/ZYY:Ycvv50QQRH/ZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Yangi xarid buyurtma pdf.exe

Files

Yangi xarid buyurtma pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 899KB - Virtual size: 899KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ