FVN001-230824[.]pdf[.]exe | Triage

Sharing

General

Target

FVN001-230824.pdf.exe
Size

669KB
MD5

10b20add9944bbb31d7e345d2f51bdd0
SHA1

18bd8335860b6480b1ac4054aaa3e37968175bde
SHA256

5fdb3de171431980fb56572dd438f76f0b2d255797c2f1ee9ff55462be22eea0
SHA512

901b5605e0e8896a7f3a0bf39ef50b213751181aab8e48f37e3effa8827be96285649434b89d2e3d43a33fdd9b5af735b90c038bc40cd46e784a37d02fa921fc
SSDEEP

12288:3eQ5vziTSvxHDJMgOGvdu8pEHtK+imNLk3xgpzXw8l/AicgNjdl:3riaTPVuMEHpNg3izLLjNjdl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FVN001-230824.pdf.exe

Files

FVN001-230824.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

XpDdw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 666KB - Virtual size: 666KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ