7104223155 proforma[.]PDF[.]r24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7104223155 proforma.PDF.r24
Size

1.2MB
MD5

2f9e70c4ba61d2c8ad6174358289c80d
SHA1

57e881fa83dcd14331b47ad63c37e676fee742c1
SHA256

91eae0138c7c8887b87948da962810e1748d0d713d1839e29456cf8d7029c676
SHA512

b4e37179361104981553064c3dfd2011ca657347cee22e7db775be3ced5003a9ad74591446399c367941d84c322412206ee1cd3c61cb1a1d9cf6c08edd8fa2d8
SSDEEP

12288:kBoORbA/oMcE/lNNypjVAopP1V0EvQwZHk+Yk1n6yTh/7YrvqZtCjo:ao8bqfNTypiopP1JvlHkVk16Ro

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/71042231.EXE

Files

7104223155 proforma.PDF.r24
.iso
71042231.EXE
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 613KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ