rTDN001-180424_PDF[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rTDN001-180424_PDF.scr.exe
Size

25KB
MD5

8590b71f1a27b4e68eb861cce9c9d013
SHA1

e5c1ca200401c5c4c217b284bb0d5657952a0a8b
SHA256

3b21b03225102a26014f6c81ad24ae6d8f7d31ebeee24dc898b606d38df2ae76
SHA512

122571ef9a59d1613a2424e24bdc6c1b4773e2a9cc29ef15b733b8d140b9b9d58a679e27a88fabcdd909dd32fc1ae09841a0cdf9d5e658e4ade15b43a16cf62b
SSDEEP

384:v4pNujrwowgYvuZfo/7LC0UkPI0zkZ5nNLxo5Qt985H5dyMlTFKLkdyQbhQ6ZcV8:vjJwgYvu27LCZk9QX85ZQMVJdyQbF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rTDN001-180424_PDF.scr.exe

Files

rTDN001-180424_PDF.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ