PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PDF.exe
Size

18.9MB
MD5

59788e9764eb60d5f0ff277b646bddcd
SHA1

a0de45f730a0d85616336f7405b5cc9755d97d8d
SHA256

6d8628ee670cea59d5314f18aacb449b858e9194a78d4256342999798b54ad13
SHA512

e07e7450b18e0d33346d618a379d8cf9f1372b0a83ce0ca421e1bc81c918a368590f4a20229914e37936497e37a8704c9a0779f728c52bbb37a25ef2fd9f4a52
SSDEEP

393216:knhZ0V6XSs2I0rEGgESPd4nCpDDqNZ3VGtdw1ASBzLR:knr0V6XSsx9ESV2oKNZ3Ve+Ag3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PDF.exe

Files

PDF.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18.0MB - Virtual size: 18.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 894KB - Virtual size: 894KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ