LOGEST_PDA[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LOGEST_PDA.exe
Size

324KB
MD5

e719985a1815a4e0ac7b47d490a67447
SHA1

781825fc7c12f1fd347e397035a925a99a26573e
SHA256

4d20a720ee4baf408c736575961c65192890d5d183f60a44a7f45269fbe2043b
SHA512

cf2b286b0ac5c219b3cb906f2c9130ef08e4f604dbc5eec5ad87ec7b0d62b1c36ac7e85092c8427c0e59015ded425b70f19b6f60c312c4c3cfb831d089c888bd
SSDEEP

6144:F/jPABkXN3VqceJYzfD/YEC0CicbcEhR+hgF:F/PcMcgE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LOGEST_PDA.exe

Files

LOGEST_PDA.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ