5250a1dcd58bb6da8350d8d170926f10af924cb1a270fd5fd357537a5edd936a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5250a1dcd58bb6da8350d8d170926f10af924cb1a270fd5fd357537a5edd936a
Size

1.6MB
MD5

e5bee49fb509e2d94d005d1a5d61aa6f
SHA1

3d63bdb74aabb8ce9ff667f63aca58a15c3028ab
SHA256

5250a1dcd58bb6da8350d8d170926f10af924cb1a270fd5fd357537a5edd936a
SHA512

c9178d9ae7ee30a6342c416fa2eca141b05e822e9bdbaf2945a481f1c6544f76ba90b981b980dee7d59a7b8a9691c08b388aecd9fe3a540a5b79d5bdd1c63e76
SSDEEP

12288:Old1WROIkfKwxp7Qqz3r+G5ZTT94W0DeDh8Y16xh/gBGAZIMHFzTfR6Cjd:O31WcJCwf7Rr+GPTTs9YfZzlPhd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Company documents_pdf.exe

Files

5250a1dcd58bb6da8350d8d170926f10af924cb1a270fd5fd357537a5edd936a
.iso
out.iso
.iso
Company documents_pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 904KB - Virtual size: 904KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ