Order List_PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Order List_PDF.exe
Size

657KB
MD5

8ce3976a60c301c1c793fc369da14269
SHA1

ad428a8342482d6f7c161598879be3c1d23cd8f4
SHA256

87c143225cbd6a7ade7b75353db06c18ec3a991b8db39c067c7028d33ec9d48c
SHA512

bb73e6d4b68035f03a4bfce0d2d5261faee3e138f32ce0b81f2b4ae1c003911dc88bc1b1fc81403814cb2e80a31fabab65bacbb340f53020b41185ea3d3aaee8
SSDEEP

12288:gJX4QtLaBlP7fS8zAWXGSHGNVzf9iD+vbaFvs2xS/JGNkKue625:s8/uRAaTaFvpo/cNlh625

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Order List_PDF.exe

Files

Order List_PDF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 649KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ