MPS202210028742916 pdf[.]exe | Triage

Sharing

General

Target

MPS202210028742916 pdf.exe
Size

22KB
MD5

7f28a176e1659470a15cbcd6b6a2acc4
SHA1

c90b1ac494c2522504749289988b4c78e62951dd
SHA256

0023258acd7add128f98f6ca94262da1fa5e270054666137fa489be3e352aa18
SHA512

fc13448d7953681347d5ed53eba8ba40bc3ad1f598fb5f939264d3d48d797ee562f375967ebe836e53e0207b235ec8b601a69363e11d21b7c124198f5e251b33
SSDEEP

384:CLUED2APL6yRqtxAx+roEOsVK/KO+sB6fT:jRs3RqtGx+roAYP+9L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MPS202210028742916 pdf.exe

Files

MPS202210028742916 pdf.exe
.exe windows:4 windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ