13012025_1558_13012025_PDF-3093900299039 pdf[.]rar | Triage

Sharing

General

Target

13012025_1558_13012025_PDF-3093900299039 pdf.rar
Size

368KB
MD5

261a5a4a91e53be1001ee7570edc3795
SHA1

05b523792ee13206e41fc419d315d6c6f5a084f4
SHA256

642a7b00bd466d8b6153a562b566e8840f1441593bb49853055b533ab36a0c00
SHA512

9d74cac6e5dd9e2a86d8f252ccccc85af398459645992e6eb9f765fea0f1f9fdc039d3214d0e21d83950cff99940ec448804e1d90dded6c84ec33d2c936d20aa
SSDEEP

6144:e4laeacHLPfmFaXPxIrwXq4gqy+sANQ5Bfwq9ARTyUlV62Xh98ZH3gCcRWD7Xls+:jaqHLXbJZ4qnSBfwq9q62R9AH3g5WNlV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PDF-3093900299039 pdf.exe

Files

13012025_1558_13012025_PDF-3093900299039 pdf.rar
.rar

Password: infected
PDF-3093900299039 pdf.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 950KB - Virtual size: 950KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ