nouacomandapdf[.]exe | Triage

Sharing

General

Target

nouacomandapdf.exe
Size

654KB
MD5

ceca2dff2ddf27ee53ad866b23535b48
SHA1

d9012c547137e1c643b436a25feab998a3a49c52
SHA256

f3398e6a171a2dc31c171813aba4aba9e9d81921a65151f8c16d63df8e638c88
SHA512

d37171eb6ac5ce0b4359911fee958daeecf5520a52dfc7fbf026c63eab12f7c68f2bc75f7efb0b2c0eac41877399bebcf81db7296b969a2777330cf6dba74ec2
SSDEEP

12288:cbN0Q5CmNR4Un7Z+51quHB2qCJtu9L0hX:W0aeU7SHBOJc9Ih

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nouacomandapdf.exe

Files

nouacomandapdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ