QT 0905752_AC_SY780093887623645-pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QT 0905752_AC_SY780093887623645-pdf.exe
Size

638KB
MD5

be4152bd4bce0f2549085336ec684e7a
SHA1

825b3d23c5db1974979f3d25813eb5ffa7bd7bf6
SHA256

aca0a4c82fb2575678e1bfbf0ac200f24e9ae1e95db27a37868bb592c7f62906
SHA512

4d02ac50c661342a85cdd4c707a7ace338b153f881bb60dd186ba1c41bfcaa71136a7926da8d442807ddc9f59af62a89a684dca04e24944c90f3d34f730dd2a2
SSDEEP

12288:8lPloOJRYWqX89cNMe4m4ygwbiRt4ozOF46Aae0ChULkAMXqBEXG9vl:i9oOJbZ9cNMe4mfaD42Ge3NaBEW9d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QT 0905752_AC_SY780093887623645-pdf.exe

Files

QT 0905752_AC_SY780093887623645-pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ