Spare Parts List[.]Pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Spare Parts List.Pdf.exe
Size

550KB
MD5

1de5ad82b700329c6666d9aecc231244
SHA1

6ada68d2e172f2666e8cc3718b10e2579d1565ad
SHA256

2af7b3022340dcc9a68e42e7b6c429e12923b62f81a36bb59e61a6121fdf2052
SHA512

104932f856f4b60fbe88d839b1d6d5a2622892df635347690cd242326a6648d149d374be3a5105f842d76ea877e13e57983a206969e44a04dfa7ce5652ab323a
SSDEEP

12288:ZuPaZS3EoDLQQ66uCun5r5lRnplpWc/pcJ:8j3EQb66uTn3pzWch

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Spare Parts List.Pdf.exe

Files

Spare Parts List.Pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 547KB - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ