payment new order october--0720_pdf[.]exe | Triage

Sharing

General

Target

payment new order october--0720_pdf.exe
Size

565KB
MD5

5caebbaa73cf214b8d2dd3dc91c4e135
SHA1

be44e74ea1317a2ae00a9a1cfa6a267dc2ce0e9e
SHA256

cad1d46bc8411cde24e24a7503eb12376cb688ddb94e2821fc51cb3e439770c7
SHA512

78929c89c4351ca868ef95dd6a3d74bec8fb9cbde8c98f24886978b6ac29766377edc8bb247102d3df69458d643d8cfbe4f01927632e1572c995bfb7d9eb0d89
SSDEEP

12288:/8zS55mFza3BRWTL9oZU0OXVd0Sf+qaNQsZ22Gsp4SI:/f55qmy1uUh/2qaeNsp4L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
payment new order october--0720_pdf.exe

Files

payment new order october--0720_pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 558KB - Virtual size: 558KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ