13082024_1615_13082024_KINIK COMPANY_PO-F24-0224 [.]pdf[.]arj

General

Target

13082024_1615_13082024_KINIK COMPANY_PO-F24-0224 .pdf.arj
Size

751KB
MD5

ba58c3316c4b8264817f95a3fc9725cd
SHA1

f4266cac7d8c012a0b8730a03295abe6b792ac00
SHA256

2dcd1d64a5389588b603ee753779b68759c2aaac245b2cf78730ebdaf855eaaf
SHA512

b402814251991a6831161f7d3cda6ac8df60261cd6b4a005603594f08cbfefcaffcd4a37bfe90fdf95fd77309fad33e130c5df7f9e3796df2a5c2a47560ad313
SSDEEP

12288:lyB5hSart+EFJizboumMslCE9bWNhiNkA0R/mQVgCEEggtf41Q8fEGtwxPgQ4e:oB5L+Sq+CE9al0Q+Cagtf4/Jw1gQ4e

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/KINIK COMPANY_PO-F24-0224 .pdf.exe

13082024_1615_13082024_KINIK COMPANY_PO-F24-0224 .pdf.arj
.rar

Password: infected
KINIK COMPANY_PO-F24-0224 .pdf.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

UQWe.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 854KB - Virtual size: 853KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ