Payment_Advice[.]pdf[.]exe | Triage

Sharing

General

Target

Payment_Advice.pdf.exe
Size

742KB
MD5

efab7252e79203b247e72fcc30fbe9f2
SHA1

87af83d50fe26dc53b7ffbaf9d8427493b83ea62
SHA256

226c51d48dc1734480b8e37ea9a4fdf57c5a7e6cb316905b38f9650292d980c0
SHA512

8fc8bb1ee597e06d6a037de0e9e10b2474a8c73d6144d543eec7d4e9476d5d396f5424bde85a40cc74af9819359b77d5e2e96be23f34647ca3d3325db968161e
SSDEEP

12288:T4CMwiMp9rYvbZzL9m4tLWc0KY8pcz2S7IWjL9axCEluzAjypQY5t4oi68A:MO9rUzL9NqJ98uqS7Ii9axCAyz4G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment_Advice.pdf.exe

Files

Payment_Advice.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

SxUo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 702KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ