PurchaseOrderpdfexe[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PurchaseOrderpdfexe.exe
Size

493KB
MD5

5d7696e21e41d5a0cf993ea8ded8d5eb
SHA1

820d9669e67e438ad18ad8ad1768ace67c62df44
SHA256

c263652c86c7e91d334de8113469d867104c62379af983b0c62d5a46940cfe36
SHA512

3f075bdf06e50ef423a7ccbe4de031faeba323d46f6dd7c908338682232d4c3323e869be0975070d895601e6edb2818d705d9ee82b504d2b1f8e6d3c4f390205
SSDEEP

12288:6kcOHJ1i3iAwB06klC6fjCyPZrRRpQGKe:6ai3nM0N3JhPpQGKe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PurchaseOrderpdfexe.exe

Files

PurchaseOrderpdfexe.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 490KB - Virtual size: 489KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ