PT230522[.]PDF[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PT230522.PDF.rar
Size

537KB
MD5

c6f934335296df9e1e408ba420e9ec6f
SHA1

4ca1524a4cf112b34a26c7feb784c1aa72baa81f
SHA256

6aca0626eae770be4ac0449da5b96a3e61e26af32cd5581742dded886af7ee11
SHA512

99bfaf38ef1681931a76c1c21c95cf7d5e1cc0aa1a69ee603a97ebf281360c93897099628c5c32defc6f69931223642b31caeb20df4981bfb82d7756e417c81b
SSDEEP

12288:ydmx8NsCq7W7fywhRsb2xSiOGmiW1QXrfJiMY7xwi2remiJRGwtoRjVE73JXB7:wmo9q7wsSxSiOGNwQ7xiMnfremEUpE7/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FeNdmWxJWfnThMV.exe

Files

PT230522.PDF.rar
.rar
FeNdmWxJWfnThMV.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 655KB - Virtual size: 654KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ