Refund Payment 274652[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Refund Payment 274652.pdf.exe
Size

844KB
MD5

3852ef50c559852278330a6231ad0386
SHA1

5af2988671baa64cb30d3f2f2010c5df24e5b5cf
SHA256

3243bd41ff00792dde1801b70254bc1c88da8c7b71573191fb7b214c498a22b3
SHA512

fbea6fa00e0d0ac77e7356f3f755d3dc0ee3ee0b3edf34e7b949c3480b975c04af1589b351357c10900a03327b976283b86cf56b9c037cc67065f906eb5fcc44
SSDEEP

12288:GWr17gq8VEwSfTmfqH8h+05ZWSBRrc8rNdWUlX1V7IF:R1IVTmCfH+0XWWuSdWU11V8F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Refund Payment 274652.pdf.exe

Files

Refund Payment 274652.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 669KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ