drafted_custom form 2[.]pdf[.]exe | Triage

Sharing

General

Target

drafted_custom form 2.pdf.exe
Size

614KB
MD5

51c33a9709b5d96f868bba667c346c30
SHA1

d90b547fa3648443c4a1f6921a2195fe552dc5ad
SHA256

75474a60c24230ccf26454ea6eb69aeea2dcc173345bc113e7fbe7c1b152acf8
SHA512

60804bdd390ed5c433911f3208815e9277f9997b0cf6918b5370a19ad23b957b2d40040ae51df895c6f02f83cc54c751fec58a1eb1e77c9f7b071c2dbb83177d
SSDEEP

12288:xdBcYORzqu9HGf0uhmHkYQVwCXKd+b92Z:xwlzqupgKHnAKAx0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
drafted_custom form 2.pdf.exe

Files

drafted_custom form 2.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 451KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ