PO-993893903993 pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO-993893903993 pdf.exe
Size

1.0MB
MD5

5c2fd9663f37d1943a29c4d63b510fb3
SHA1

d9c85bf1c028f4c69a4f01dd570ab609c64c1f38
SHA256

43ec53c2f3911dd640f84b8714f139a8b0d168e156e741fb007f601f6fb5648f
SHA512

76912160c5d5d2cade6163443ce898fe6ddde41afae9aede582977563ef77d4c008787fa0b73cfd3903a1f9740c7cad6052e74c25c685fbc75c04368d8d87fe4
SSDEEP

12288:GH41ItaBX7xtSWrJkriJU7ucmMyzA4rbHRl+DUHJnWoNyoja7OwkhR:86qrOUFyzHrbHPVfyp7Zg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO-993893903993 pdf.exe

Files

PO-993893903993 pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ