PO 20231615HO pdf[.]img | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 20231615HO pdf.img
Size

120KB
MD5

47c6ab3db56907b61545764dbe937476
SHA1

2539ea2499ee15fc4e834d46456fa94b6b3f35b6
SHA256

c71b7e688d79fa6aca632f57ca33bb7bc92b95d101509d926f311466b460d362
SHA512

4ef4e9f7d7c856d1126c4151d71b0ba398129655c071790531c52e7c15cf809f6cd069dc9e197a3ec4bd21faf09a9a2f0e0681860c45bbb5c45e81413bc8ceb3
SSDEEP

768:bD2yZdP3SScNY8rfRqTuM+1+55emZZoHZqCyo0k4sxZO5GAwOywPXwA770X9mncF:X36G8QTugvAN50kvfZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO 20231615HO pdf.exe

Files

PO 20231615HO pdf.img
.iso
PO 20231615HO pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ