22052024123122052024PURCHASEORDERPO2RU2024[.]pdf[.]gz | Triage

Sharing

General

Target

22052024123122052024PURCHASEORDERPO2RU2024.pdf.gz
Size

631KB
MD5

a3e6b27f2cd0a05e66fa535bad256be7
SHA1

eb50ebbd793d29c409b5864aaf7641f7f9ab8825
SHA256

4a5a55f3ada290496dbae9ad59f621b75c85923830580fc98d79d35a6ee7c6c0
SHA512

a46f146f316a4a5721d4dc95b4c1c25497dc4976f91d50a7b83b57732f416a8d1a6945f726a68884a2fb79f6812f9c08540106412522c3acd0b3ffb516148f4b
SSDEEP

12288:dI8sRFdo33iBIuC1iobqqv4LRLWORHyBieNvXR1eKy9+tUHGIOH:0BrCBELMoy8eh2t7H2H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/PURCHASE ORDERPO2RU2024.pdf.exe

Files

22052024123122052024PURCHASEORDERPO2RU2024.pdf.gz
.rar
PURCHASE ORDERPO2RU2024.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 650KB - Virtual size: 650KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ