Purchase Order_pdf[.]exe | Triage

Sharing

General

Target

Purchase Order_pdf.exe
Size

771KB
MD5

a6d88a0d5569be22befa066a14fc8a50
SHA1

d1c5085c2125de344f8e43387fd402f7936300c5
SHA256

e914375794ce1cde4a1caa435ff42bb9eaf9c74f5f0138fd8009605c9411b789
SHA512

50c36cbd6677410b335c4c8953cdf604d6c9204cbb2ea018313e42f1d9ac3b2eccaefe44e057ad9015321d17bf16f6e0e5ae23a3800ae94add5a72a44c7b3c09
SSDEEP

12288:hVpBxxuENQ+ZRHi1RpY1KFRa0CtRU5fGtIUaEYZe1LVbhYnr1VE5LK/zr:BnHwz3F2w5zUqGeVBzr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Purchase Order_pdf.exe

Files

Purchase Order_pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 769KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ