drafted_custom form 2[.]pdf[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

drafted_custom form 2.pdf.7z
Size

360KB
MD5

42b753e02fceb5a5302f1b2a86930b61
SHA1

68f80553076152d8106375d40f99a4b2eb656969
SHA256

779a39c757fcaa949b3bba0642b687c280be90f385cbf0050711b4dcebd07866
SHA512

a4c62cd6a29e5da7bf02d505f4977517ab5ee2a480c200826040715cdadda38c6405f77e68b479dac7dd3fa73ac950186c896e8c2372a13662681ffc05212b51
SSDEEP

6144:46WfMhlkPrhqxKz61zKobOpGo6XHaBc4fIwuLmxLmPYdGhjkexZsOyY+/e33sXCE:42Lkrc8zqu+HKfFuLmEPYdiwysOV+/Uo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/drafted_custom form 2.pdf.exe

Files

drafted_custom form 2.pdf.7z
.7z
drafted_custom form 2.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 451KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ