purchase_order T&B19-20PO128[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

purchase_order T&B19-20PO128.pdf.exe
Size

556KB
MD5

2e8221b460bf9cfbc5ced5454e146c6f
SHA1

d91da603515024cdcdb5f5f637a65f4aa7b8bc79
SHA256

29f2f8293c3b8868dd9f057b6b7ec1a898c1e57205be359afafa433cd9cd7bb3
SHA512

5cf07c80d5350c6b65689c021c2632a63433be505d2f14f9350e03b629956d1366ffae983487614ae6c99c1ff2956e53982bb0ebfbfa755857ce12754da153ba
SSDEEP

12288:q613oV1fO2ldVgEqZ/TrXbqP7r9r/+ppppppppppppppppppppppppppppp0G:q83Q9Hld9q53q1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
purchase_order T&B19-20PO128.pdf.exe

Files

purchase_order T&B19-20PO128.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ