Quotation-pdf-[.]exe | Triage

Sharing

General

Target

Quotation-pdf-.exe
Size

670KB
MD5

e8b1562034c0c6cde0669d4c5135a136
SHA1

e60f817cab60d9f9f60966d4f24454ece92ca8b6
SHA256

d5620e317780ea9daa8f2236dc8dc6890896f239e7c5ffc74e3f20b3f38a5aa3
SHA512

9168288ec5396f2c05278edb86cfebff9df0a790b28c01d2476d590d17f725312fe2abe97af0f7dc6e661c41ad7523f7dc23a5362b18826491e38fbba72c980f
SSDEEP

12288:kFQg02B1NZwnF5UH/MD5leAeJ4HtuUf9dY1nA+t:ki1c1DwFWf0leJCuUf9dEPt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quotation-pdf-.exe

Files

Quotation-pdf-.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 661KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ