LEG-C Gas Wave (Q88)_pdf[.]scr | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LEG-C Gas Wave (Q88)_pdf.scr
Size

762KB
MD5

1347ce21a2d60e8f9bfc4fe95897fe1f
SHA1

6be48fe0acb74ce61bb41ae9992c35cb19c92a7c
SHA256

f8cbb62c5359c91f2ccec433fda8883a0e72db7513d126f5774389ffd9b6fcda
SHA512

613fb843bb26e3a4998c292972049f57ae63ab90d82bf75301b00331bbcbb0a8b1f27a2b52568ea90c2f4769db9662ca0536102f1dcd24baa3c219381e5a8da3
SSDEEP

12288:ftUcKNr+u92Av7h/CD3duFjfgR2tOj8oNw7NAJCy04tKvwE2qj7QkRJ8voOkg7Mv:6bCuEHJU+ooNENAJD0EQp/hmH7M1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LEG-C Gas Wave (Q88)_pdf.scr

Files

LEG-C Gas Wave (Q88)_pdf.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 746KB - Virtual size: 745KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ