ENQUIRYPR-009583POWER ENERGY[.]pdf[.]exe | Triage

Sharing

General

Target

ENQUIRYPR-009583POWER ENERGY.pdf.exe
Size

604KB
MD5

3e01756a6f2ffed6c3ee881233f371ca
SHA1

04466fd9c0c40a93c30c3c09a7bfacc5da3d5c51
SHA256

eca31a8b84856348ea97f1a1469c8b34f6afc80b79e5a0d40fca44f2a4139d0f
SHA512

37afd734c0620c5cc807ea0e46e87d1746dcebdd7cf1e995c50efb1e5b8e0055579430b5b7b3190fd9ac0f1124b62f8fdb8d02618a9a2625804f57d829059b1f
SSDEEP

12288:CYnAfDuHOXHWk+qTK8jpPD1CtX2ZifPC2J0Ayf2fCJ:CYng5BxCwifPXJNe2a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ENQUIRYPR-009583POWER ENERGY.pdf.exe

Files

ENQUIRYPR-009583POWER ENERGY.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 584KB - Virtual size: 581KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ