rNuevoPedidoPO-00843[.]pdf[.]com[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rNuevoPedidoPO-00843.pdf.com.exe
Size

3.6MB
MD5

fe0244480b7be035c478b4778d082ed3
SHA1

8f13321bb29651c263227c7f796e85cb2527830e
SHA256

a388e34ff2cb46b718c443618a4597468bfc2236195c06bccbfa71dbf5d47479
SHA512

624dcc507e48a945c2956a8da39e28db477397173241022d30232653b32d2907a6048fbd2e79013d33157293f73a1ed2996ab2ec7e51d663c022c5f99aafcc00
SSDEEP

49152:au2JhK0dN9R2QAhDm2NMDy0h7EFM6mNaZWZQ303GS3Wb9Slw+NVa3nhjzCAIjq4m:V2e0tAhayzFM6T5gGJbElw+P4nh6N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rNuevoPedidoPO-00843.pdf.com.exe

Files

rNuevoPedidoPO-00843.pdf.com.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

FKGT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ