doc100902345678909876542349_pdf[.]exe | Triage

Sharing

General

Target

doc100902345678909876542349_pdf.exe
Size

714KB
MD5

44a8748ad2e53882df45e6a049b696eb
SHA1

456b8c85c984772f80d5a4dfc1709a95dad8726b
SHA256

1a30bc0d430f010b44ea3768053a0889efab84eb1b5b199153b487633733de78
SHA512

1d8718cbda69be738482644a3d2b41d48e0cfd68ae96b942686c4923ea85773eeb6a7ecdfd9c91069632739ad372a501ad15ac21b1cc5de271d54fcbff03bb37
SSDEEP

12288:MUEP/SJa6dn1+gAqeqPZvmv9a2QceDYGJloIO+KFzE3xW4:u/4XHRBvmvU2oSI/kYhW4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
doc100902345678909876542349_pdf.exe

Files

doc100902345678909876542349_pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 685KB - Virtual size: 685KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ