Ferlam Technologies Order pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ferlam Technologies Order pdf.exe
Size

97KB
MD5

4d054b190e5ceacdf9b0e99e0216a625
SHA1

e30f43720ed7daa3074cb867aa4abf5e34866be3
SHA256

161a446d57ffc13178f1b7d0ea96d7b1d4dcb1d86117b139ec84628f45051eb8
SHA512

65b8c3b4ceb1cdf57dae7723a4753aadf2220052475c941aa262ee01a51c5aaa4cd84e8eb5fadd787395892505488523d7e9d003b5f809c874fb6e42f2fd9a9e
SSDEEP

1536:HRjVuLjuOdhClVaGMYsKGdll9IDuwjtPrBDZEMAINbD/9ELWCZf1DS2gHdNIdf3H:iSMYsRll9HwRBDZE4NCZf1DS2gHLyeU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ferlam Technologies Order pdf.exe

Files

Ferlam Technologies Order pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ