NEAS[.]paymentslipvoucher[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.paymentslipvoucher.pdf.exe
Size

727KB
MD5

ff6d48f8b550eca5b793a8cdafb9c689
SHA1

5ba7c7aa3255ac0c3b2dfacbf7d9dc3d613a43ff
SHA256

b68d03062282d38f52d9c19540ec2e1ec85eb501fac42d5ac64c4f77b1e087c1
SHA512

459070537a14650e431ed60b25cf4a862b884abb58413985e06507d1bf57e46397ee1a0f2fdbf795c2891a36186e24e41616f77f85b3a813a832632c26a2835d
SSDEEP

12288:EXk/aAp2iNkuPF33L1odtxWuLuC0CGi1hKwaV1iOQSzaz7/Kq6qZjMwuHSlThuZ:tHp1l5b1Ct1LuX978tyS16IJrlQZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.paymentslipvoucher.pdf.exe

Files

NEAS.paymentslipvoucher.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 725KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ