INVOICE REVIEW_pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

INVOICE REVIEW_pdf.exe
Size

546KB
MD5

1f46639a92ebaee74c4e79074646a99c
SHA1

0510dd7909764f8a44e2c9f290fd61f6f57eb011
SHA256

12361d47524fe20ebca655db20945642b53f37ce38ae73c415cda2e0c88173a5
SHA512

7521a85418b203bca06ba9d78ad0201f83b4dc2ed09d9d5f065faa5b5f47d45378aa61be51fb3c8d1280f77e22e3b2d687e70a9fdd063be9b2f1f9cc587e23e8
SSDEEP

12288:XUR61zoalGY8gmq6BRr621/AP3w0OuOV25PV0SIGHN:XUR6xeUgr6uw3w0z5P6e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
INVOICE REVIEW_pdf.exe

Files

INVOICE REVIEW_pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 541KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ