OZEKESSEVEN[.]20[.]01[.]2025[.]pdf[.]exe | Triage

Sharing

General

Target

OZEKESSEVEN.20.01.2025.pdf.exe
Size

815KB
MD5

97a247124adb2f06a055989511504ae4
SHA1

2682dcaa02f20fd62daf71d8e93249ab9cab2d05
SHA256

fea0db3026f3e075b240d97b0ff93ac157c8dc69a7d56a32e3595ed261a9ea55
SHA512

106769f08c0bbfb1dad521c9fc87842532235aba8b01893f51832590cf2082ab0c3954f9122880e13c6658ab5ad1f29da259a81223588e401f0828f12fe4691d
SSDEEP

12288:X5y6WhRSUuncKBvu9vM0y/VLj5iyce8rhdyIu+FGLRxdqAdaXwjV:w6NncQu9+DcfhdFQxcA4K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OZEKESSEVEN.20.01.2025.pdf.exe

Files

OZEKESSEVEN.20.01.2025.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

QfNE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 812KB - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ