PO ERHB64J8HF[.]pdf[.]exe | Triage

Sharing

General

Target

PO ERHB64J8HF.pdf.exe
Size

734KB
MD5

20f4465ac298e52d90c214d0a20745a0
SHA1

15d875fa872f0760904b923de9bb9197c6346ef5
SHA256

e21548973f158e8fbc7b0cd460019fb0d378ceb55f20a49b6ae346520e1f58b2
SHA512

460bdf6643f74930ab239e665c602e118095b7379cb35b00d2ada6919cea35059806ad6ec220ca1f0af115dc483beca6bdc21f02ef0db56228d3fef981e8ffde
SSDEEP

12288:xSvTetd7l7xdvo/MdyrhFgtDsuBHsSj5J4+saBGIFSo16uYdSWHEfN6Aa9VJkQS7:xSvTu9BqmycgiH75BzSY6utWcJa3JkQm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO ERHB64J8HF.pdf.exe

Files

PO ERHB64J8HF.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 712KB - Virtual size: 710KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ