PI pdf[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PI pdf.rar
Size

496KB
MD5

ae743e0b73a8d72949fa32216b2fd4f7
SHA1

eaef4f87ec69602014a6b0e8d8a261609a8b18c8
SHA256

96155416decd38f617684fe576bbfdd6437c094a900d078509a20081fea75c97
SHA512

0dd1494ba42fcb48bd3ce003d2b9e3470e776da0c03c1eda474c41c82aacd369d6c73277a0ed5b4eda4a2c0fecb6521dfae3a1edc0f371dfd4262055b67ab37c
SSDEEP

12288:1EZ7v3k7bHflrOaA4DyN29H/2o4257FRJDzwc:1G4pRXS2V+o9/Nz9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PI pdf.exe

Files

PI pdf.rar
.rar
PI pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 579KB - Virtual size: 579KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ