QUOTATION_JUL7FIBA00541·PDF[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION_JUL7FIBA00541·PDF.scr.exe
Size

1.4MB
MD5

50818390dd33a4c051dcd5b11f83713d
SHA1

21800e17d6ee19d59fac5f1c4b4397d8e5ce5251
SHA256

0cfa378be0ba59aeb6d4f75ec7f8e97d26794d5a4cc3258ded80117020226c96
SHA512

7c3d5f3e7629198a159cb34953aa41b75786085cf848082d1d2a393f242ddd9cdd19a11d2014312445454b7b1463f4de019aebe17ce73f12d3868f701175cef5
SSDEEP

24576:51LS3GRygK6m4ZwN4zxUpaAUVEPGvE0wU9XGAcAy:+3LlJgwyISVCoE07WAcz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOTATION_JUL7FIBA00541·PDF.scr.exe

Files

QUOTATION_JUL7FIBA00541·PDF.scr.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 912KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 479KB - Virtual size: 479KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ