AWB_Ref_150322028740174pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AWB_Ref_150322028740174pdf.exe
Size

639KB
MD5

d256f45c83ea019f3e9e163ddcc3c4ba
SHA1

62b0881816194f5d0395999a13fafbc90c5e3870
SHA256

5abe3dd1a7c780e81324a7488a7f50fc5ae23679cfa4992cfe064cc6082b78dd
SHA512

f44564185c26b4c2cd9c15363cec3642db2406ecf4cf1e59bb5d731bd90ef6511870afb65a162c082cda9ab5f3e0ddfb5e1cbed5624220520cc2cef0d8230064
SSDEEP

12288:Q9gkbJNCsScIDZn5vZFQ5wBUjtCcPnbVmHzIRMl6k:9ktN9VGZJZF1UjtCc/wHzgMgk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AWB_Ref_150322028740174pdf.exe

Files

AWB_Ref_150322028740174pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 636KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ