COTIZACIÓN-00468[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

COTIZACIÓN-00468.pdf.exe
Size

653KB
MD5

68cf198a297fa53b7c16db727e467873
SHA1

a53c526b2bfc70e6097a93397a53a6769a924749
SHA256

d699b78d72ce231d7135f8cdfaacc074fda40d644cb7c0f089987cd502bea3f0
SHA512

f9c86c99c51b887efb7209ed28c00b1ae3a634d31a4af70cf4c3eb7c42ca0244c50e950d994e430932d23a8b00f29b9bdcfb96fcd29de267d22061e450d9637b
SSDEEP

12288:2RAs+k9Rbv4FHbal+SgVaTj3iQuIaXFtvU2Tog:bs+uCk+STXerFUg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
COTIZACIÓN-00468.pdf.exe

Files

COTIZACIÓN-00468.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 650KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ