16112023_1955_16112023_New Order for TM in Season#2024[.]pdf[.]z

General

Target

16112023_1955_16112023_New Order for TM in Season#2024.pdf.z
Size

519KB
MD5

80edde027a10bf0572852296309b18ae
SHA1

f043fa7126f760d032246092baae6cd6e6478ba0
SHA256

868400263436cd4a5faac97c623eb5b674057e10ddfc244c9ff96d8e24b80723
SHA512

f37bc208f0116727b61dbf7dd0e2a07b69d7b1500805cea99b463cdb4f2c28c578315e1841c176c2c469a05be269af7f7e14d49c21b182852f31272ef246450e
SSDEEP

12288:LMXMv3tAGb0yUdHTz9DfovzIkGe4/S03Yc7Bsmx4ds6m:L9/tInUskGeabrFN

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New Order for TM in Season#2024.pdf.exe

16112023_1955_16112023_New Order for TM in Season#2024.pdf.z
.rar

Password: infected
New Order for TM in Season#2024.pdf.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 547KB - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ