PTT-20230706-WA25016pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PTT-20230706-WA25016pdf.exe
Size

3.6MB
MD5

9918a3899c2682851d23d07e10a7153e
SHA1

b2b4dfec7c439253abf2ded7ad4e5befcdc41a39
SHA256

5919ae288790c1f2e0f81d6016f5f6c037738b9887d0dacfd259cac766d8e882
SHA512

8523c08bd22a0fc71d29c3d739c02739feb4429e16d6a87c04f11e5993dcefecc1bc5dc1275b962dc61c99fd8cdd770bffc499389186d94d02ae504b831a6aad
SSDEEP

24576:c12J/ToakWT1kuSWUpP53m0Q4fAGkqWJvc111kTFdSegrgJYuepHYUtVsJ6nPbQ8:82poaCuCpx20Q4fAGkn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PTT-20230706-WA25016pdf.exe

Files

PTT-20230706-WA25016pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ