PO 8620801 [.]pdf[.]exe | Triage

Sharing

General

Target

PO 8620801 .pdf.exe
Size

892KB
MD5

60d3c0ba8ba14dc2070d16baf18a1986
SHA1

244244ab1ebda098d7792eaea063cbad5fb16945
SHA256

77b6742a4beccef32d22a13aa555eb35537265ecc3662f845d48a86dc126c875
SHA512

d3304af1f4e3cc82fa4caa56e100f27efe1276a93697dc5a74ec6e540c3a9a44b1fde5c4ce7e798a1de1b89c88bd6c950f5b397becdf5aa6d476cb7b08263aa6
SSDEEP

12288:Uoi6cfy84PI96XOnna8NymofY/6ZPcnrVGh06v75VZbuOY78cXrzzfdWsYYT:Xi6cWwYsYmoYTrVyl7buOW3zlnf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 8620801 .pdf.exe

Files

PO 8620801 .pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 890KB - Virtual size: 889KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ