PDFelement[.]exe | Triage

Sharing

General

Target

PDFelement.exe
Size

14.6MB
MD5

f62a293bef0c62c86f2a3030a12faa09
SHA1

75a3b8296988bc58b8297e83167e01e9465cb1d4
SHA256

1e2e9251e461c8eec2b9577879114a76efac1f91d8f250f2187f7c44ec7e7dde
SHA512

4936e6b046f3dbb8499801a1936c41dec5e37c0671d760aca2b668081f666d70bcf6397d6709160ed145ff1d9cc2340d5907693c3879d1655750bb9aa2b69e2d
SSDEEP

98304:QY4Gvh/YsMMVyOzfCoiLBSjNwX2vwAOuvHc00x8WjG+djyGr:QY4Gvh7yO3jNwQCuvHVEjt+Gr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PDFelement.exe

Files

PDFelement.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14.4MB - Virtual size: 14.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ