richiesta-di-supporto[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

richiesta-di-supporto.pdf.exe
Size

49KB
MD5

5aeddeaea0af4a6a7606359ed55bc08b
SHA1

5b44374f1b15a6fbb9f965b6a121fd76882f7c25
SHA256

fd960106a30f223b99e3e03e2da90c8a4138d99540676595395e4e7b28556675
SHA512

e7d89d1f0a5f4e712e55ca4a1bd7ec19a1df76c44a19ea25145e099f0887fb92a0f3eb0eedca5beb68f03c746dcd82d4436dfd59b05b13a401be6c7f8c10fba2
SSDEEP

768:HErvmKhrE+LME+4E/bQsswgUSqpSD4lWyBY2GLf:qx1AEZmLSqp3B4f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
richiesta-di-supporto.pdf.exe

Files

richiesta-di-supporto.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

MKjJ98.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ