2023[.]07[.]03[.]PDF[.]exe | Triage

Sharing

General

Target

2023.07.03.PDF.exe
Size

237KB
MD5

63e262e8558681251d45c52633df9d0a
SHA1

40d3a682020a6f66bcaa1a753657793bad935489
SHA256

52cde2b88aa65fd327813294d67dc3cc10ffaa1774acc0c7a5d40de397de2871
SHA512

ddfc370c8a00d2b058ca6db75431c5fb2aa5320d14878b68225f863cd1a9cd24ad86a906c5fcc43fc07c46484e9b4bad14daeaafbf02474adce8fb2259680f5e
SSDEEP

6144:eZvatN/T/14Y5ecPKKCRJGOjW/nv7tBO1Fic:eZytN/T/WY5KKCDGOyv7jOWc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023.07.03.PDF.exe

Files

2023.07.03.PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ