DOCSZOE23050007_pdf[.]exe | Triage

Sharing

General

Target

DOCSZOE23050007_pdf.exe
Size

925KB
MD5

2802ed78b53811feedcec153eb8aec22
SHA1

52b9086f87e0b36179fd7f12fff108114ec70d4a
SHA256

5ddec8118b1cafd72d1a28420cc8e7979a3c75d5847c1148358be9a454261aa2
SHA512

f35d10a9a66e17749e53737c10c1c661941390295b993a09cf65e5e914402fcd8409f943deea73b6c63437dbb718b21a2919c1737c2af33f6d42c457b86d3a58
SSDEEP

12288:BQ2iNuLpNaPn0YPX/NBXibHqfra32aq7wZpd1k/UVlwb77oY6LXELYteAWXdfbbw:C1RP08SbHqrC2H7inyMVM78lP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DOCSZOE23050007_pdf.exe

Files

DOCSZOE23050007_pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 923KB - Virtual size: 922KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ