BL7247596940[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BL7247596940.pdf.exe
Size

793KB
MD5

2cfe5875e422f8667374368d5ab954d1
SHA1

1fefc3ddaaa997426f5fed1432e302f6641a38ca
SHA256

378ab1d8e8937363a7717b38ac57bda61515878afa6e59b1557da455a094bdda
SHA512

d73a2661b9f2760465ada9e88f07b05231d92878ba3996b11f51858e499b4def26e9d74227140f520054399398a238820b6adc1cf10449944a38f4b616eeb76d
SSDEEP

12288:u4Olj3cw4C8m7Qu1syUNHUWPw4LEzxY+4C4QV6Vyy1gjoB:u9d5d8WQu9C4NVd4CD6Vv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BL7247596940.pdf.exe

Files

BL7247596940.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

HQZg.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 790KB - Virtual size: 790KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ