NEW P[.]O_2024[.]pdf[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEW P.O_2024.pdf.scr.exe
Size

770KB
MD5

fdcec5c2dea5c07878c17cecd1701e58
SHA1

e3455fb89f69506af45fb6e91a9f91a29a44458a
SHA256

5fe5181b988d3e69170cfe6e0c3391cd72b57fc1a4fd384d3bf109c51b9944b4
SHA512

e14eb5e60ebb27bcee427c408264deaf675f136da3008e25f429b05f917a5b29e6b40867b4fd8d9f2bcc0237cb9c8ffeceef23a0ccf9e5a346243bc01b23f239
SSDEEP

12288:bNNird53rD22qhHeVqoCbyzrggYfAuBUqd4AN/kM7qPH2W3y51BmpHf1Kcw8oP:b3i3rDIhHeV62KdIAN/fEN2et1fo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEW P.O_2024.pdf.scr.exe

Files

NEW P.O_2024.pdf.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 748KB - Virtual size: 747KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ