Delivery Note_Ningbo[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Delivery Note_Ningbo.pdf.exe
Size

885KB
MD5

438ea1d810784cebbe1ffd336bbc899a
SHA1

070e195a515b7f42e57079e98ab37b78933738cb
SHA256

fb691a42e8a2724d7607e6eecede7434abaca4d7ee341c8a736cb990637ec55f
SHA512

0d554c62b1b87ea4733eb8349916e72a907140e0f028cf74765cde50e3aaa243abd7052fcfd10b12bf9cbe431f0de3f2b07fcadbb1e8e2ef40db3b9b63ca93f3
SSDEEP

12288:OQkqIwcuDrF25EL/7SjRRPgcFaSlk4XqNMUT6gFC3rsdMyMbMUQe2ld:O2sdhdlk39Irq9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Delivery Note_Ningbo.pdf.exe

Files

Delivery Note_Ningbo.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 761KB - Virtual size: 761KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ