Receipt PDF[.]rar | Triage

Sharing

General

Target

Receipt PDF.rar
Size

547KB
MD5

68ecb524324866ea580d97005258a458
SHA1

33c2e06037f562f4b59f7a605d7289b82f324bc0
SHA256

24c86f8db82fd871cd4d79e85c6264e28869f04d9f74fc24a3d441bfda3cbd60
SHA512

13c52ad2165f0c1732292b9e1597b890eac30120b42b8b57a4d39d653b07aeaeda5cdd60ecb46d0f31139cb8b8d679a473966e8ceadee1a63739cdfdfa40a61e
SSDEEP

12288:UHjHHFayBnehjXxhTLx+D9fP92KWq4Ouo2vy0xf3BxSr9guFY1PekbcX6:kjHHFRUhrTLxkP9bWqBj2/fxxruqf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Receipt PDF.exe

Files

Receipt PDF.rar
.rar
Receipt PDF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Sdic.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 547KB - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ