Quote WQ102474[.]pdf[.]z | Triage

Sharing

General

Target

Quote WQ102474.pdf.z
Size

510KB
MD5

72ce2fcc9bc7f58c76f8b3481c3a6ad0
SHA1

91c498966c1bf0813096816525ef90d36ebbd55f
SHA256

e3662e11681b8c8e5becaf34b3a74fd5980c208a062b686dc418e36824993c3c
SHA512

537c015f7b5794a50f41d461f34110d27dddebaac149ff2ffa7bd2a045aeee132c40b08458a41fc8143890e2cdb009a929fdeeb8da0d721a3c804107dac4538e
SSDEEP

12288:bFVkfWrw9MkxsKnEvYhXzPiAHvyPRola7kiyMviWAF:M6aBxnRtvyIaoic1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quote WQ102474.pdf.exe

Files

Quote WQ102474.pdf.z
.rar
Quote WQ102474.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ