b9d0194c9532e9da9e60d3acb30ef670cc2bf3fe57992417bfc2050a3a986a8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9d0194c9532e9da9e60d3acb30ef670cc2bf3fe57992417bfc2050a3a986a8f
Size

4KB
MD5

5d9e692329dc4894b62652e260a234a1
SHA1

02cf8200e590a53bbd32b63c1771d4cfa33b12ac
SHA256

b9d0194c9532e9da9e60d3acb30ef670cc2bf3fe57992417bfc2050a3a986a8f
SHA512

88659927ee1c5be6b5967360cdde1fef23cb37e0d8d2dea960254560de82d3264127df2481b8c12a9aefdb7da048add7d209826a10bb442b3b94be1521824838
SSDEEP

96:Yq+y8bTfAttElCrPWC94QmYAyL1k5osHirffLtGo6vqUdI4E+tTq2zmA8b:YqcfYwCr9TmYAyLm5Kd6vqUdI4E+t22I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/OpenPDF.exe

Files

b9d0194c9532e9da9e60d3acb30ef670cc2bf3fe57992417bfc2050a3a986a8f
.zip
OpenPDF.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Скорректированный перечень требований.lnk
.lnk