CWXMF230300599[.]pdf[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CWXMF230300599.pdf.7z
Size

523KB
MD5

7fbcf1f44fa8c9a8f13d1f75767c2d90
SHA1

cbae3eb45c7e6374917558f008aeb49aba02313f
SHA256

9033771df1af5ae533ca4f6485054faf2001653b54f874a9913e3f065e708166
SHA512

d61ae6705e4a37522cf954f2fb1806c6270b015bcc269efe66a33d91bf739c037ce33c0074e9bc5fdafa3603c1aec99dbb9f0c1163bdb111c5af5612cbd2b15b
SSDEEP

12288:rJhJNnqQN8gw27JYDnM5aUTpU6hHrxLS2NMpIeNKGsBq0sq9X:lnpXP7JYYFb4IpBq0l9X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CWXMF230300599.pdf.exe

Files

CWXMF230300599.pdf.7z
.7z
CWXMF230300599.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 820KB - Virtual size: 819KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ