QUOTATION_ APRL 310377FIBA00541·PDF[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION_ APRL 310377FIBA00541·PDF.scr.exe
Size

1.7MB
MD5

59fb38d69ae1ad7b8e8a06ef4e759e2b
SHA1

c536a5bd5184e9c70e97a8872ba0dac68cc7eec0
SHA256

872c7da529d6ed8fcd717b0ac0abf03dc750b195f245303c66768bc20087eb2b
SHA512

c2cec8d319bb601d21c4210e37f5f459e2712ac5c86d608435b1aa4654de65e62f87c969b59814214bea81db076b6a1224678289702855ef6b3106710bf6eea6
SSDEEP

24576:XZBZVuMFwg1VtUP6/apJMqzBciwZxuDai6l92N/XxCO9ykyK+ghmtHjlaiXQ+MIw:vZVuMF5ti6q7tFwaF3E

Score

1^/10

Malware Config

Signatures

Files

QUOTATION_ APRL 310377FIBA00541·PDF.scr.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ