Document_pdf[.]exe | Triage

Sharing

General

Target

Document_pdf.exe
Size

778KB
MD5

8944d71a1ed15d3a0ee606905d957c10
SHA1

4d760346a4f78554a1a41b09a7ac14f3a46748d2
SHA256

c869527d4761ebc3b0820cf7d375533596e399184bed6918bf359e04678cce8b
SHA512

e139f67dc4ca1a40a358ad9f590da73d3dbe1eecb4628cfee69ba2271226230fcd2727046bb09a05fbab908fe9fbe9ce855a0aa9b14b0f109de9805805db6ca6
SSDEEP

12288:n0EVVeUZsZEYvYMKRmhnclCnWSuAX41t3ClU2IfcLwOM01:feUZIPgr06Cn4AonyC2Iflv01

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Document_pdf.exe

Files

Document_pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

bhUu.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 775KB - Virtual size: 775KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ