PO-020716-WA0002[.]pdf[.][.]exe | Triage

Sharing

General

Target

PO-020716-WA0002.pdf..exe
Size

696KB
MD5

c51a9f02f48f2b02ecbbe5f330c211a4
SHA1

394e84d7e16cf386f4b33bb2761cfb9beb13595a
SHA256

636943f682f71370760679bd6afb382f5e0aacf31995624007c6541eddd62f53
SHA512

085f8c471bfed18d83795cdc6acb44730c637a2b106188edda8cefbea9213923d638a107ec5052b426e0d14f2d8c7fd10f5c89c816ae5da29ca28fcf55eb46fb
SSDEEP

12288:fY/SDzsiLGVTYEMaWrrdmZzaXRaHd/7g9JYms1PAo6:fY/SDDSfMhvgacd/qJYms1Yx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO-020716-WA0002.pdf..exe

Files

PO-020716-WA0002.pdf..exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

yPAr.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ