z51KRB202000000000323pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

z51KRB202000000000323pdf.exe
Size

1.1MB
MD5

22ebd57a011b32ead487722f08c73dfc
SHA1

c782a7578339104d365d1e3321718ee6dcf0385f
SHA256

880afcf0d5f116d755c14f746a93d21406bf16dbecb496e84b30143d48a926bd
SHA512

993694777999c21f51fe38aea82dc388b14bc447b4bbd2d1ad7961b2eb3a4e734ec3799d81b0ae978ee9a21becf3f3d07d98879481f76e7d01eae0aa8c494586
SSDEEP

12288:UvEIuYBk8V/1VH9UJ/pCVEH2oWIdfNxxEGZphKRuoj1x:UL/nzVVEH2JYRjphK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
z51KRB202000000000323pdf.exe

Files

z51KRB202000000000323pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ