PF234-91224[.]pdf[.]rar | Triage

Sharing

General

Target

PF234-91224.pdf.rar
Size

578KB
MD5

c36f7991cb6e5ac34306815babfadf4c
SHA1

eaaf48d3efb0e2a5b10b988ff6403c5e3ecb5510
SHA256

bdd9e311c550bef90f58fb23c8e3318cc388ac62e756aa0927f91b85a3e75103
SHA512

3345aaaf83f59a8987a54f59fd5bd08c9aafab4e12d0515bed87a523ade727c00c8efca7a17fbad02b4c6959f0dc8e27a0750c9eb10a16c6cda1cebdfefadfa3
SSDEEP

12288:6DD3PNk45FG5sVbC0JUsDAbXgSTxKKpU1HouvyFgww3aclM3sATidw/YQpN6b:clP5FhCWAjNU1X6ewwF+30dwrz6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PF234-91224.pdf.exe

Files

PF234-91224.pdf.rar
.rar
PF234-91224.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

IATXT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 885KB - Virtual size: 884KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ