NOPC-0040061 -KIMIA BETON-PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NOPC-0040061 -KIMIA BETON-PDF.exe
Size

1.0MB
MD5

842a08bb166c4f3b6ba8f16f75e2729a
SHA1

33633421158d76d0e02434ed4180ad0d84eb9b96
SHA256

73fefba42ae16381d9b77d51cfd2e01942be0ce74e25d296eaec217c212992ce
SHA512

801d26de9c57bfc7f29b30aa515b7818ef473369dd07501074356a566a565965a83354ee96162d7593c6fbe101d20ba7fbed5e4774546544fb703a06c5eae460
SSDEEP

24576:0Iv1t1I92W98Ozv2kXn/O1rDa8FCxhLcNzV2WZLeZ:/ZIYWSGvhX/O1faXxcpbde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NOPC-0040061 -KIMIA BETON-PDF.exe

Files

NOPC-0040061 -KIMIA BETON-PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 997KB - Virtual size: 996KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ