QUOTATION 1309-RFQ[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION 1309-RFQ.pdf.exe
Size

896KB
MD5

fc6a61ebe3359d87aee1b2759fd51fbd
SHA1

3af94de8f4160c3278fec523c63edaf3ddb70960
SHA256

1a527a566735a732121f402724300cc3b59577459d80d127433564b4b9eca5a1
SHA512

96cc054ed178c51cc5bff926922578170acb0840e9671f7668705fb856f936b96a5ca33e70262b479f241056e657232409e71682c1cbdf489d145045b2524520
SSDEEP

12288:DHNo+n1juZHG3fAilIdvDpdS9XAPajwSVm5ZXlTF1qffaR/4ve:xLoFNzS9QPek5Z1TF1UI4ve

Score

N/A

Malware Config

Signatures

Files

QUOTATION 1309-RFQ.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 856KB - Virtual size: 851KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ