FBZ03546726488267488264[.]PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FBZ03546726488267488264.PDF.exe
Size

910KB
MD5

711a5cf30e5d079db488b10c245c517f
SHA1

cfc48a88bc7221b8a5b78c8290a3f1d1a9757212
SHA256

59e5fa333164a097c04766ea5c8fe4ea626fd987ccbd8d9fa15f8a7b143a0237
SHA512

211e4e7d33547b8bfcf57aaed171ebb5f60880d2d002014688db25aa55a058c72bea614fc19d367b666b0fe83ecb0adaf378f20c5d28593910b3e4d0477beb0e
SSDEEP

12288:1qSQNK36Di8BtLCmz/3Mz6qQRygdKFejfvczsAF3oaSXz2c7CzfSUjDWfj9h:UvuFKwmz/HqE/dKC/0fSoDWfjP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FBZ03546726488267488264.PDF.exe

Files

FBZ03546726488267488264.PDF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

rWAKI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 903KB - Virtual size: 903KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ