#TN#1053958936#306E#TWKN[.]PDF[.]scr | Triage

Sharing

General

Target

#TN#1053958936#306E#TWKN.PDF.scr
Size

676KB
MD5

384c43c53e26b04077e7ffe810574718
SHA1

9e82f9731837dfe4bd38f73da095ec27c5c4b9ff
SHA256

224d047b62d6fd457253d627ac088bd3076b2ffe137df3ffaf918e73bb4f684f
SHA512

bcfb5a4b38aa0e21a838c4a238359ec8050db9d05b0ece7bdfc482e70bec47d08e336a36f768f3b70153c7b610a18692e17fe8c3d04904e0547413c11374061a
SSDEEP

12288:uPYPfY7iHnWpD3Y/MtlxcV2RtalYkvLPJsBYDu3tcmowXlLWD:uPYPgrpLYEtlntmLvzJsBCOtcyLg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
#TN#1053958936#306E#TWKN.PDF.scr

Files

#TN#1053958936#306E#TWKN.PDF.scr
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 673KB - Virtual size: 673KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ