BNE400266900B - RLS SO# W317pdf[.]scr[.]exe | Triage

Sharing

General

Target

BNE400266900B - RLS SO# W317pdf.scr.exe
Size

911KB
MD5

b5d9738bbe1f9563cdc8808c96135415
SHA1

d29d5768719a3bf4381293775af31d5bcdf11ca3
SHA256

9c1dd67562324157ceab4d8e050c84150afc6ddff6aec72206ab437c31aac7bb
SHA512

fac077ca47baa5250a3092e50568e14447e7ac00b4cadb766736c5bacd38b86ae4679c1d63508b9b0ceab808d2ce5df4384d88cf9e6fe31d65f165e13c60d1ee
SSDEEP

24576:q2IgEfML+PtaSdOHOvY8r4A7L1r/6A4hhqIU1Xw0A6oC:q2skSoOQS4A7L1ri6r1XpBT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BNE400266900B - RLS SO# W317pdf.scr.exe

Files

BNE400266900B - RLS SO# W317pdf.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 909KB - Virtual size: 908KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ