ZCJ16630912 Payment[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ZCJ16630912 Payment.pdf.exe
Size

716KB
MD5

b89f6062d174e452d189ec4248af489c
SHA1

f1581489a4b9715a7644de4d986a1f6fb5d65438
SHA256

08a1a9925dfe42290e12823fa21cb53cd879fa1895011d2cfa41d1edeb464795
SHA512

5d31b0856295ce346a70b5f62895182cbbe386a166bf070cdea8e5609080876ffad9a5f1c74383399e38f88be32b408dea653ffe26cc1bb5fff49931104c9ad4
SSDEEP

12288:ppwoqYXLomWOHSRIQ8ARZHulaicWovRspEJhK3hgyOhc/n0ymE8oA7+N+U6:DwoqYXk/BOQF+aizoKEShtD/n5m7oo+S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ZCJ16630912 Payment.pdf.exe

Files

ZCJ16630912 Payment.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 713KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ