Purchase Order_QN2022110977·PDF[.]scr | Triage

Sharing

General

Target

Purchase Order_QN2022110977·PDF.scr
Size

1.2MB
MD5

8f27dcbfe37d09f3a77ab156cd0610bb
SHA1

cc32505bc36a8ceb36bab91780372f52575237e9
SHA256

03550406eb2a760acfd999cc72724da53d1224f862afee56308f314c290b261d
SHA512

07cb550c68129b07e1d1798eed625b4eefa5e986d67dd138d04263917b7ac5abc5eff84ff00e173373dfa384e6441ab6de7ce649e8db74246dfe6dcb79c30461
SSDEEP

24576:lZcNJcw3V37j9wCRidMFm1xIJrKTuaVZp/yQx+X:lZcNL37j9wCRVFm1xIMTZTyQx+X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Purchase Order_QN2022110977·PDF.scr

Files

Purchase Order_QN2022110977·PDF.scr
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 909KB - Virtual size: 909KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ