CONTRACT-SCANAL2AOXctymON5KJ-PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CONTRACT-SCANAL2AOXctymON5KJ-PDF.exe
Size

528KB
MD5

da195638b0ba23b97c4cc4f6f05652e5
SHA1

4ea66d42cff514ef817bb4bb78449e605408dd7b
SHA256

fa2e13816b82a6b02a6b4c92c43da4cee9c73a89b7c60efef7bf3446dfd75db6
SHA512

c69ffde42c5282cc9e56b3678b880f8414a047822e4b69637b80f91b44b52d6d2732b4b09d0944c9e3ead9cf5580565da8b02b41b12557f2cc1cfeeb9058b4e2
SSDEEP

12288:zHrD6YKin0GnWYBloHlsI7yILsScRY0K:vDH0NalMlsIG7RfK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CONTRACT-SCANAL2AOXctymON5KJ-PDF.exe

Files

CONTRACT-SCANAL2AOXctymON5KJ-PDF.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ