NEW ORDER ENQUIRY-JQ2341024749[.]pdf[.]xz | Triage

Sharing

General

Target

NEW ORDER ENQUIRY-JQ2341024749.pdf.xz
Size

610KB
MD5

acdc75598827e2d6e2bc0825e2181240
SHA1

7bac8711ceead6ccc530f03af699646ea07e0b11
SHA256

95d49b0ec839ae800171e648c1768b328109028032d4ee7d00e9f4153c7dca1d
SHA512

123730755d4b6e506abc2729800503e5ca179b6a9d9528086ef19a933b783d8e90f995a0241376d29d07f0282869974e07e54b60dceb31c582b7f9e7f810a900
SSDEEP

12288:vfUnHQPCnYyuGBwjfK95tzqi/5DSG4SOJvFTF3DLZoFkk:UnH+lGiK95tzl/EG4S8TFvG5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW ORDER ENQUIRY-JQ2341024749.pdf.exe

Files

NEW ORDER ENQUIRY-JQ2341024749.pdf.xz
.rar
NEW ORDER ENQUIRY-JQ2341024749.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1012KB - Virtual size: 1011KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ