订单查询 22[.]08[.]23[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

订单查询 22.08.23.pdf.exe
Size

835KB
MD5

dc21494ea4968d15fd0b51d34c150e7d
SHA1

bcdc2daf74bd6f6457297749f9d0372d7a1423d8
SHA256

06a0320f4d16730521aa07f88e162355f51a0aa98a2d5c173f6ac09cd7c9837d
SHA512

6acc6859711f3464f749b089fde7162595478f370660b7de75d85e7a7cee8a3508b3362af35e9e47c8d61dfcdc64b4aedd775f9c430c51fce4c970bc95eb1ad9
SSDEEP

12288:YTc02d1mbTdaWsJ19t4oiW6P0frlE+rHeq281IrF5M1YIZ:YTPdI13lE+r4lFBI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
订单查询 22.08.23.pdf.exe

Files

订单查询 22.08.23.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 832KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ