Ferlam Technologies August 2023 PO pdf[.]exe | Triage

Sharing

General

Target

Ferlam Technologies August 2023 PO pdf.exe
Size

1.2MB
MD5

2b0ea46162011d71dabc5f7b41e4bb33
SHA1

4c53a78fb6fa54e4e758cd7ef37776df59744d33
SHA256

d32a2995531b8fb3a8836f10e5239219715488a71d6b83bff5c9dad615ab8fa6
SHA512

22187c8b22daae6ffb8d8ca807736ca141c31c149614adb667f3a48a8da189afb6a0e4d4fac608ab3e3df0eaaa7fa472b299b1cb1829ef562ca83c1e0132c0c9
SSDEEP

24576:BU+iDJtfBV+bTJy+O8GbF12dUOA46B0dwj2jHy:mf+ADtSjH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ferlam Technologies August 2023 PO pdf.exe

Files

Ferlam Technologies August 2023 PO pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ