RFQ No[.] 6000003101[.]PDF[.]z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ No. 6000003101.PDF.z
Size

854KB
MD5

f18dcef275894d7f21ecd63d9b7f312e
SHA1

65828ae56a6a99a1adf992f64611530ee13f20db
SHA256

c67fe59e7b73118d4b96c9f079c9a37b99e71689b384ab676029d98d96f4f871
SHA512

d4a30f2a7675502469fb5ef0565c8cede114ab1bc24c013354e23b97f01658bb61943c213479826def7ce7bd1f68c65064b19579f6d2bb0200525ee117205559
SSDEEP

24576:NKiZvfDRiUyjrzjbLgUuLC4mmyhpbzRXrwY3hOJREHU32HC:HZXEjrPgdTmmyhHUUHUGHC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ No. 6000003101pdf..scr

Files

RFQ No. 6000003101.PDF.z
.zip
RFQ No. 6000003101pdf..scr
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 830KB - Virtual size: 830KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ