AlhadbaniLLC_Product_Request_as_drafted_by_Procurement_Unit_PDF[.]exe | Triage

Sharing

General

Target

AlhadbaniLLC_Product_Request_as_drafted_by_Procurement_Unit_PDF.exe
Size

14KB
MD5

435f24b8c42deea646c51964cc758ea1
SHA1

2178ab58c199a600d1a3d63019dd291bbf140485
SHA256

649c990b979ed55c805f2b4d3908dc8e8dcdb7bc6cba741013ca838f20569cf5
SHA512

1a62f2bb753d03db2db2051cf5a356fc20e51dbed7a7f8e6e2c73eee28bd452917be5d4163a0189cf581a3efb2b4f930d74fed05b835e8d4e7bcd717d4ea84b4
SSDEEP

384:2Y7V8m1et/1mHzCkI/eQ9CXI19zZzxowf1RpoCV:D7V8mgtdmHzbySz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AlhadbaniLLC_Product_Request_as_drafted_by_Procurement_Unit_PDF.exe

Files

AlhadbaniLLC_Product_Request_as_drafted_by_Procurement_Unit_PDF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\Blueprint\obj\x86\Debug\Blueprint.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ