CWXMF230300599[.]pdf[.]exe | Triage

Sharing

General

Target

CWXMF230300599.pdf.exe
Size

988KB
MD5

06d1f96907c8265da37dfd9dcce3bff3
SHA1

df6e90bc4534b80433b045ba767d62d3f170ae6e
SHA256

1934c9d93e6a4198e68757441c611e6c31306b38aeec33a5f1f6c09f1f8ce466
SHA512

3b7562f2a03037ce2b4c3fdf5f5391ba8036697939d336f9b23a835d717297397f32e65815cfb55c949822012200cdd89a7ea95db6269488eb391b0911917aa8
SSDEEP

12288:OWoCRCrFF1HvV7J9BEMF/UTpUMCyrxLxoWMLI8N2RMXmPqpYyEiGen55bQ+k9iFs:BoCRC77J9tGtWINag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CWXMF230300599.pdf.exe

Files

CWXMF230300599.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 820KB - Virtual size: 819KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ