Quote2098757899[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quote2098757899.pdf.exe
Size

968KB
MD5

193b78a8b511b05f2dba6a4689ebe90b
SHA1

1e89276128082c4869437f5b5d4efe2e88da6ff0
SHA256

15664d4fa6706fc61d1fb61e18469916f8fb643810938af7c77d8d2b94e1545a
SHA512

6d3b8365dc82f0aeb460b43b0a0d79977f2a1fc27aaee57cec3846a30a158356669ee7bd2975ab5c5929620806f023978d5e82ec34a7fbbe287a25cab8779cee
SSDEEP

12288:e7LnM2Nt53sKrsfLujbAhWNFcdXm5tmLzxWLFHpbVeigZ89aP4fNVUGU0cwNdDAJ:jfYbAhWNFcwjm8dUFBP0NuGU8bDAJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quote2098757899.pdf.exe

Files

Quote2098757899.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 963KB - Virtual size: 962KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ