QUOTATION_ APRL 310377FIBA00541·PDF[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION_ APRL 310377FIBA00541·PDF.scr.exe
Size

1.9MB
MD5

40d39696385300b01b12df141b272de6
SHA1

ec487e44d273c908e0deb98b8ccdf6be629dfe79
SHA256

aad314e684a4195a25d580e3e203b8064b275adba10f144d1bf69126b980f2c8
SHA512

f88e7dca7c5285566f3d2599e5eddc6d61cd0d6a8afa277658d6f90b2877b0ba110635af9439b57e1c179e69d2a007893efa0ae2d2daa3c32198f4a168d535f3
SSDEEP

24576:NwUMVuMFwg16C+jdPwqPa4TuLXlBsrWvYGZ0/qrFiAUb4RuyR1daaokt0dYeW2VR:QVuMF56vUznvRg4V9i

Score

1^/10

Malware Config

Signatures

Files

QUOTATION_ APRL 310377FIBA00541·PDF.scr.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ