overdue payment pdf[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

overdue payment pdf.rar
Size

630KB
MD5

2c1424a8a85dae75de98268298d024db
SHA1

a240ea7349128a4a6fdcc2f93de690eb0bd60e2d
SHA256

e38f859f13e982d332dada2cc71f6ebfeb87793959bd37642dc8f9a1d9b655da
SHA512

646800b2723c220bf1bcfcac57923a9e79d2569962cd470576fbf13a80a50369c430e2835a76368e2496d9e96c0e8f0a16b31fade5e2ab7433a0bb063cab2d62
SSDEEP

12288:VZSOiF0Y7gWz8zyUZsN972eBz3/+EX91x134CiuSLkkFPXOB7ySr2:3wF0YUyiQ9zZ3RnoCA+h9r2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/overdue payment pdf.exe

Files

overdue payment pdf.rar
.rar
overdue payment pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 743KB - Virtual size: 743KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ