HAESU KOREA SLIP 20230928_pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HAESU KOREA SLIP 20230928_pdf.exe
Size

558KB
MD5

b075c8d37f3342eeb18d2698de2e3e65
SHA1

6c6f440e9ca12806473d91f02b027985edf141d4
SHA256

6a74804f8a0e8571a7d6162f62fec6fa1e73fe232f57a488da3d8b5d09b40b14
SHA512

6eea1d2b7e39dd19712db0d42d919f1d961629c4f8156d9d56c7b3e774f979cb8b47d78bd12c09162bf7982710ba0d1dd677aaaf2ca203225eefcb654b3bbc9b
SSDEEP

12288:7cDAckj4CMeQD4ts7igCeUR3QGLKmHJ4A+S0:Uk3s4tKi9hQWKo4r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HAESU KOREA SLIP 20230928_pdf.exe

Files

HAESU KOREA SLIP 20230928_pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 537KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ