PRINTOUT COPY pdf[.]cab[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PRINTOUT COPY pdf.cab.zip
Size

567KB
MD5

e8f834aa9e2b42fde4df0e08f49127fa
SHA1

97efc80a2e771a20fe00d67d7883323a446c38dc
SHA256

19cd85b432bec486536de3072fb26a632b09e0f3f18207493cf60572e2dbd993
SHA512

e0390c2d7e6fb5c29bd39a16d669bf5b232857b85d6c9048b0997282a0c10ed9db167b643a39a8cc7f38a1f74648619b629fa7764c27acb2120ae1ebf87fdde0
SSDEEP

12288:UEP/oNFLQHabBCVw7Rr6qgRYa9ZzH/NvdiY+U7fSqw6gg2iFCjl/:UE36FoVw7Rr6N9zJdiY+U7ZFCjl/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PRINTOUT COPY pdf.exe

Files

PRINTOUT COPY pdf.cab.zip
.zip
PRINTOUT COPY pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 593KB - Virtual size: 592KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ