QUOTATION_220377FIBA00541·PDF[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION_220377FIBA00541·PDF.scr.exe
Size

1.6MB
MD5

207892bf6bd4848f8752991a1107418b
SHA1

20f6ee7f665b97db9f1d0cb1011c4e00bdb6943b
SHA256

378b2e1c2c56ab4c5990aff52baf0ba351d61ccff03db14bbd574f7d38274b0d
SHA512

361cfcc11e46444ac1963a4df5581dd6de6bbc8ab56b19939e1e0ae2d3588f5dafda21f48667ae739310f8ccf1325781836ad09202e1514b94b8994aa6fb5611
SSDEEP

24576:c9e5nAvnkpQEnLZrgfvhgZ/HosO91UB2aOCoEpX8:YfObL28

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOTATION_220377FIBA00541·PDF.scr.exe

Files

QUOTATION_220377FIBA00541·PDF.scr.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ