Nossa ordem[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Nossa ordem.pdf.exe
Size

600KB
MD5

009a24792496f65b834a3b8d2ed97c97
SHA1

34924a324da597c6df88b1719af7907fd2f6df73
SHA256

88c0a4f198b99be42be456d49cd61731bec58522a81fc170ef44f92296a39e04
SHA512

386e874da098135be6a6fb96c05f1b040ee2855d32d3b41cac1008966c98def156aab155fb0bbe0b24cb19ad44ef33953bac086ac66b3c7501c1991aaa3d54f3
SSDEEP

12288:UcdIYZ9hQfrtgqfyz1gMneWW32THeqI2xg5p6E+qTrQaSejL8Zb:UctYrCqfy0WW327eqI2xgLGqTrQaSejI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nossa ordem.pdf.exe

Files

Nossa ordem.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ