RQ039423[.]PDF[.]exe | Triage

Sharing

General

Target

RQ039423.PDF.exe
Size

745KB
MD5

a9236435368f55bbb462fd7d03a832b2
SHA1

75d703203a24ff7e6a0f451598837d57304bfa27
SHA256

abe0a6708bda47a3fad184d79e29e780300ce705aa45f04ee506e055ed50dbb8
SHA512

e19dc3e29dd1138bb4067f41168ae458811b0713f0f6530199b7a3fa4429de306bbb929dcf9b74058937250db02514d38aab820862c8b88e35b5fdbf0554b697
SSDEEP

12288:pv953k9WSr3qJlVsLGxQKDx/MDJI/BLHCPtUKSVgVI3ny6iZ7btZIlrcHewyQJ3y:pvnk9RMlV1xQKDx/MDJqBLsUNyC3x+7Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RQ039423.PDF.exe

Files

RQ039423.PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 742KB - Virtual size: 742KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ