PRINTOUT COPY pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PRINTOUT COPY pdf.exe
Size

735KB
MD5

2450d3726356e271682cdff020e2596b
SHA1

93a2017c287d4e33c3f5403304b3546543b3dab3
SHA256

329650704e1626db6c03a23a11007dbb0ed82ae526d842547b2b1921ad97526a
SHA512

98fce4f48d362e5234fc5df81af9511b05f3d9a0ba22f33d9a68c3406b74e637c43a9c36eed6d26b863a7b86069ffce67cdea53b47b66d27a0b2982e186b14e9
SSDEEP

12288:qmGmEz5t9o4XieHalDCVW7Rh6qpvJ9NI1E7a0RHovhV1TmhHH:GzD9bjVW7Rh6UVI1E7Z+v8hHH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PRINTOUT COPY pdf.exe

Files

PRINTOUT COPY pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 593KB - Virtual size: 592KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ