m2 Cotización-1634[.]pdf[.]exe | Triage

Sharing

General

Target

m2 Cotización-1634.pdf.exe
Size

740KB
MD5

6e5ca1f37b8648039bfafdd8cb1e822f
SHA1

f0c8894043fe99c5a7495753a729a1c0a29f5486
SHA256

c039e290e4a70ee9df0d6ebcca435676c758a2a6a0bf734cc37fce88a03d4bde
SHA512

0266db4f526bbad9a87ee6376ced7bf48c53d088567345296b810de2b42e3b74c4edd003186da597ec15bcef6570281d063a49dcd8348acfa248a65750213ccc
SSDEEP

12288:S/BUkhF9WMBjYyciD7g0Zl8Xns7nZ19fwbg3xoTMrmhPMNlG+aoeXyDT:SU02MmniDnlWnsjj90mBqVMNlG+4XA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
m2 Cotización-1634.pdf.exe

Files

m2 Cotización-1634.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 730KB - Virtual size: 728KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ