Product_Inquiry[.]pdf[.]exe | Triage

Sharing

General

Target

Product_Inquiry.pdf.exe
Size

616KB
MD5

bf1b297357e3d9320e0d08c9bd2cbf22
SHA1

a7ea45c00e701298092e22d1b0dd988bdf22e671
SHA256

632fe84dfca150a891d9aa68ba0fb7c8c1230879a05bb6ac1dc4d0538133b417
SHA512

a76b8bb6f81cbc295c86fc525cb62f0add26159bf591c5263fb9d89829791bac36589fde2d14b361bf514cb43e9d29bf7727624c7bf1c10c1c9c105b1ea4b319
SSDEEP

12288:Md725tF3ivQL8+XKP0OrpGt2DQ8mvfdJ9DLAgm0XgOd/vLHh9:ZrFi1KKMOGv8mvlLAgKsB9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Product_Inquiry.pdf.exe

Files

Product_Inquiry.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 607KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ