Quote[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quote.pdf.exe
Size

754KB
MD5

0f873fc136346d2bf73b4d6680bf36c2
SHA1

6f77182602451bc25e04e57fc3865cf56458d956
SHA256

c17ddf22a9d9aa2bfdd64c0310a6aae22f2478efd4e6edd6cda28a7bd2dbb9bb
SHA512

d77aaf19f25692c5937b38d2c3c26439c742a9c39d3b1e11ab6a2477ec84ee2b8c46113c7d92e5ac34da4a8c10b9097ab41168be80adde23ad9161e04c663ea5
SSDEEP

12288:zUWz9DhcQwoLcZPv56IKR5Kmh0NUsTMOD3sATBcLE7COiU6dt3mjhFacHFNe/puH:bhcQwccZJ63KmEMeBmsd3I3m/F0x3tup

Score

1^/10

Malware Config

Signatures

Files

Quote.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 747KB - Virtual size: 746KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ