Mv TBNCalling for epda_pdf[.]exe

General

Target
Mv TBNCalling for epda_pdf.exe
Size 647KB
Sample231004-ql8j8adh47
SHA256 246d6ffb502aa4b83300c5bb35e008e245ad36d243a83e6bdfee04eefdaac71e
MD5 176816d3f1c87cd8887e482e89a5a003
SHA1 9a5772b9e8ae129e7275323400b7c714ae614d9c
SHA512 a8c779a4f6b39168ef9af9a5590a1f411321e449e85c644b9199a6124d6bdafbb7254ac1c84e22a818e1f82b25e4631d7a6ac4710e8b32f9871a4608acc1dc77
SSDEEP 12288:68zS55mFzmwWda+Y2Us2X/hTMjQfWAjDamt4wD+ehRgaj9j+Obfbe:6f55qz++sMhTzWmemKwDdfFzbze
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Mv TBNCalling for epda_pdf.exe

File Explorer

Mv TBNCalling for epda_pdf.exe

.exe 647KB

Mv TBNCalling for epda_pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 246d6ffb502aa4b83300c5bb35e008e245ad36d243a83e6bdfee04eefdaac71e
MD5 176816d3f1c87cd8887e482e89a5a003
SHA1 9a5772b9e8ae129e7275323400b7c714ae614d9c
SHA512 a8c779a4f6b39168ef9af9a5590a1f411321e449e85c644b9199a6124d6bdafbb7254ac1c84e22a818e1f82b25e4631d7a6ac4710e8b32f9871a4608acc1dc77
SSDEEP 12288:68zS55mFzmwWda+Y2Us2X/hTMjQfWAjDamt4wD+ehRgaj9j+Obfbe:6f55qz++sMhTzWmemKwDdfFzbze
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

663794

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

Mv TBNCalling for epda_pdf.exe

mscoree