ab8fb7b272d4f1da6f2b5cb1ebbc0a5b1863d62c29c9bd9e2da533394cb48082 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab8fb7b272d4f1da6f2b5cb1ebbc0a5b1863d62c29c9bd9e2da533394cb48082
Size

744KB
MD5

8a127c8ed2fda426527fee9e28dfbb06
SHA1

70810dd714c8b80c7bc8bd0fa041811e4e1c5c4f
SHA256

ab8fb7b272d4f1da6f2b5cb1ebbc0a5b1863d62c29c9bd9e2da533394cb48082
SHA512

8ea2e9b065f91f0a86ed148db2e5740e887c2d9dc442ddacc7639fa73d3c12570335b08bc0c4014381db0b072b915c460c34621cef31faaa228df4b10984cffb
SSDEEP

12288:oui6+15iNL1f081jnV7TjOkhNOjRkVXfzOoVhOTA/acVEQ2+/657BuNO3JlZe4dn:alid1n1rVfUuV7dJVEQjilBuNOFeJig0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Forklift Details and Specifications pdf.exe

Files

ab8fb7b272d4f1da6f2b5cb1ebbc0a5b1863d62c29c9bd9e2da533394cb48082
.zip
Forklift Details and Specifications pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

iacl.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 768KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ