BL6387457290[.]PDF[.]Z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BL6387457290.PDF.Z
Size

749KB
MD5

d87e05ccbd8ef3740e51b78620954d4f
SHA1

17283a1de852c5ecb994259f0780803cab6970e5
SHA256

fec20b3a32e36569a9a22b5acddad74cae58903be7c8123ab52ec407227b827d
SHA512

e402fe30e02b20b0ef70d78fe10c28837686b486885f412115a67b0711a982b196381da901c99a005e64543ca6eccae9f89ae3a294b65a7c83310208a9921c0a
SSDEEP

12288:gIDBqA5nbBIuKv0cnJwP7wfP6TJVSJbTIjNQW6Q0pcJ6dsWmVNTLwVbk:gIAARAt2wKAUH0pcJFWmVNnwV4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BL6387457290.exe

Files

BL6387457290.PDF.Z
.rar
BL6387457290.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

XZbX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 783KB - Virtual size: 782KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ