C201GTKT0-000000162[.]PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

C201GTKT0-000000162.PDF.exe
Size

723KB
MD5

077bd05ea32a3eed0e3f0a289dfa1087
SHA1

d511085323362fbabb71473128ac23e4eb3f01a5
SHA256

fd310dd65cf99f9392307b0b7fe8e3c4c45ad5019a321107abbfbd9c6c571de0
SHA512

f6f0a226f549b48474401196ea272337291e153315634c7534763876b61d6136e7f66a3fa83a6e8a7be174aa016e21ae3e1d8d229da225b58373e0e7cd67d9cf
SSDEEP

12288:iFOofC1PquL1J5TxpKxotkOBO2566cB5Xyty9g/8Va7hJ8xWbFQcLGjNYok7G3o:iFo1quZJLpKoDOG6b5Ctyw8AJXQ0oXkz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
C201GTKT0-000000162.PDF.exe

Files

C201GTKT0-000000162.PDF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

qkXC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ