781070479541[.]CI[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

781070479541.CI.pdf.exe
Size

943KB
MD5

690a4608ac4142a98de1818d06b494ca
SHA1

aa1932b5a8352b12d5fff5a8cda8920e2d894c74
SHA256

10ebe0fe04beae12147976c041e93e653c69cc16b5a21e43b2c5215c49c7ac83
SHA512

c88bbb99ddd1c70dae09cc6f5877ffb7ff14848748367aeebf6aac4803659da0da33c4df05da8792196f9c88f75147e65e5550d35d159b23bccf8ab967f40935
SSDEEP

24576:bPya9iv8esA1FyNyZrnJI8jnLUq/iSg6lRb/MCJSuOIK:bviv8eD60JdnLp/iSg6l2KjK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
781070479541.CI.pdf.exe

Files

781070479541.CI.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 751KB - Virtual size: 751KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ