TCL-3485744[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TCL-3485744.pdf.exe
Size

703KB
MD5

e8bcae4e9041440caf84cac0aea8b6aa
SHA1

5ef38e5f6e6c1fe6a9ff24a25e6df569f4afa818
SHA256

b5372cebf5de722e79a9b485984192eb87f6ad78eb2bdd725ae4521c90c0ddac
SHA512

3300750f720bd94945f8ba4169fec7b51eaa90f9bbc10586a6a72b128a047b5c929f9b046ad1c7f8d10a6ffcc43166221c56ccceba058e4a38882f3467e4f31e
SSDEEP

12288:10pei36RGWEYl1LE42iPvLmd36xnn0tpZpkwiwlloTHMqT:6pp36bzl1LXlPvLmdinKjJicig

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TCL-3485744.pdf.exe

Files

TCL-3485744.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 693KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ