LPO[.]pdf[.]exe | Triage

Sharing

General

Target

LPO.pdf.exe
Size

675KB
MD5

6cf919a41fe193eefadc57d75449c3b4
SHA1

e5e5d62abc60cec11c420323c2bd9636813adab7
SHA256

78091d62251b24e840b99cf80f6f9f68a1725a1b2cc3a11aee84847e59b38ff6
SHA512

a21f4198fb80cb2e0ff63442ba1623524f233a9f63b059eb07ade04fb88d1391a4cf8c7a49b1471495406f37dca77a951c86cc529f1f3d6fa10b43a6a67b459a
SSDEEP

12288:RiMx/jwFpuAb38AkUQ/XYBT0mnExmFENGtoOINE52LFfYr5atEZsnpi:FLIphTHkIp3lFRo5NEsLBYrzsp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LPO.pdf.exe

Files

LPO.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ