Refund Payment 274652[.]pdf[.]exe | Triage

Sharing

General

Target

Refund Payment 274652.pdf.exe
Size

607KB
MD5

7b67ab99d632108c09d8680c851ab3da
SHA1

4cf75340d4bbce4846e70a38ad9d6d0c0bd4f9bd
SHA256

a984faf760a7cf721200ca8f1f8c4c70477a4aa14864b377c63851ba475cc9aa
SHA512

a700985c0a5ae991d72ceba71574a4a2975d11e46e24038e76a99d28019ed1f38929fbfc17db01732baa3b876994e72724a82c90ef1ff13e0561ac2a1e58449e
SSDEEP

12288:Bh6yDYefMncYmpOrVP6OuCBmZWF4j4cUlVeSD9Rn526HjCTMrxydu:B3UcYTrV3aUQ4cUlV5D9R52kc7d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Refund Payment 274652.pdf.exe

Files

Refund Payment 274652.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 605KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ