Quote Order_Parts & Drawings·PDF[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quote Order_Parts & Drawings·PDF.scr.exe
Size

935KB
MD5

116e42afc80aa29b77e37955a1434bb8
SHA1

3fddb6606e7956510b1b3e03894db2219a6f924e
SHA256

845aea480b4e69994eec7fc5b5db0b1377746ac925bd093d327325c8d84bb576
SHA512

fc891af135b1158593db38afc8151dc8bb102cd1a18e9b35b3477726346f8dc0828ce9b5a4e5b24acfd6e99211458054de33f9250e11c862f24b5f1fa717711a
SSDEEP

24576:l13H945bXSee+JjoeIZbGOJ6+Kn5ixhiie2aQw+bK:lVm5c+JfIvUn6cW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quote Order_Parts & Drawings·PDF.scr.exe

Files

Quote Order_Parts & Drawings·PDF.scr.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 932KB - Virtual size: 931KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ