нова поръчка pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

нова поръчка pdf.exe
Size

627KB
MD5

09a70eae110ee8330255f6ca379c4e28
SHA1

e40fb6c666d638b1068d7480c79dc32ef469cfe6
SHA256

3981ee1705c19ad29ac3d94a6a95a6b55d10c5ed686b5fa3cee9d69995268da4
SHA512

28851b5053de2eeed7de2f176515ade4580db0fd1216293d73bd3cfbc479f4d735454b2c26078a7f31f8f421b637a40fed47a3a801a883066be14b5336d92e96
SSDEEP

12288:pHE6jD/berN8VGWZeDYKf7ZmWwYGTFhBu68dAksXtx+5sLENz:9tD/bex8gWQcmoW0TszdAXXtU5sLEN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
нова поръчка pdf.exe

Files

нова поръчка pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 624KB - Virtual size: 623KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ