20022024_0449_19022024_PO-010816-WA0002[.]pdf,ST-07[.][.][.][.][.][.]zip

General

Target

20022024_0449_19022024_PO-010816-WA0002.pdf,ST-07......zip
Size

664KB
MD5

92669097624b9221e4f5fd24f32436f6
SHA1

87f0f15fb0b8d52c1bc32f6049ff00b18acd2042
SHA256

fec7941dda7aae6dfc4f9fc98837b0d1d1ef9010df21fa1f2e7edf918ca2fcb0
SHA512

269fbf37b55d4be89167ba207a4afb1d1dbeeb11ee0c3331145135b73d523fe4ac5ebf46d19e4e503b4948cfa53011b70f3bfc50425661b2df52e102b1ba75b6
SSDEEP

12288:xHptu7HFEHz8GlvOGjtCVr2tt0pHm2a6u0uHitn1PZTWNdzKmN9pGz5/RK:xJtDfvxtCB80pHprtuHit1B+zKmNPGdA

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO-010816-WA0002.pdf,ST-07......scr

20022024_0449_19022024_PO-010816-WA0002.pdf,ST-07......zip
.zip

Password: infected
PO-010816-WA0002.pdf,ST-07......scr
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

KZFN.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 700KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ