Quotation-pdf-[.]exe | Triage

Sharing

General

Target

Quotation-pdf-.exe
Size

744KB
MD5

e7f1724ccbb35d49d7fe3adbeffd161f
SHA1

2fbe4e683985d358bddc51656fe6d67b35043d9d
SHA256

fb9e9215deca3e197ebc03f3e84fd2c02fed5cb14ae31c5693dfd7a8727b9443
SHA512

98150df7b086e75052a33b02cd497e5aa54243c9a86af4eb5c23ee8f70937e673ddbd94f39ae91df8ab688fc437e982b0ef0a912c56fec6486b951f7241ede2b
SSDEEP

12288:iRP2B0xTGlxNqvNu2hZ+nUEsn9ujSkPXjEINck2egMV4fDoR8s6f4GNZhi5yQ610:yPLaVUH999uTvck2egMHR8s6f4GNy5yW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quotation-pdf-.exe

Files

Quotation-pdf-.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 720KB - Virtual size: 717KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ