TR23-USD-33 Incoice of MV ADAMOON[.]pdf[.]exe | Triage

Sharing

General

Target

TR23-USD-33 Incoice of MV ADAMOON.pdf.exe
Size

22KB
MD5

147fa4ff3985efcbf3fb7074bb47f626
SHA1

32123253e38e88ea10d67680f00d3d3416af4f89
SHA256

2a4f2bb0198262260af505eb3198a4a38dcee62a483f9fa42d55568b9acc53f2
SHA512

42ae8edd3cad1cea4175d1ea1fb277d36ef021ea55d67f1fb12e56d154db68accade7b20cb714359dcbc6b552712ef86e804ec6b69858432cd1b756be17b90fb
SSDEEP

384:hZHrkMJ9g0MRp3NPnbn+b/AeH9F9wGjEnAtNCSGFqUt:hZH/y9Pbn+rLXiiEnuCLFqUt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TR23-USD-33 Incoice of MV ADAMOON.pdf.exe

Files

TR23-USD-33 Incoice of MV ADAMOON.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ