BANK[.]FREDOOM[.]PDF-2023744811[.]UUE | Triage

Sharing

General

Target

BANK.FREDOOM.PDF-2023744811.UUE
Size

204KB
MD5

014111564c1aa30cada7696df1bb1808
SHA1

10734be76562b659461d915c8fc4767841e7a805
SHA256

abe7b545a7065d598cfc652adaad37cfd6d76a1edf7869ee10fe2d4ab94d9b51
SHA512

dc29199bd4ac07cc981ba83dc3c72d43a79cfb886228c527bd6236be017d8d1190f1d693fdeeefc74a6309f2de76bb0fa03055bc1d8c1ae6bb1b7c6e9b4c5432
SSDEEP

6144:V5s1CK5J9anI+TiKCPumECxAahh/nsd7mCTmvOB:uvYnI+PCmmECxv3/GqZvOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BANK.FREDOOM.PDF.exe

Files

BANK.FREDOOM.PDF-2023744811.UUE
.rar
BANK.FREDOOM.PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ