E700 quotation20111209_PDF[.]img | Triage

Sharing

Copy URL Twitter E-mail

General

Target

E700 quotation20111209_PDF.img
Size

1.2MB
MD5

17328ba7d7fc46c22e8bf4964ff2b658
SHA1

2d7d6403407cfa2ddbcaf5bf5bac95741e4bf929
SHA256

c391cb7ee09018937b04f7eaf92976c87f27634ff5cdec5e89f66c988c8d27de
SHA512

32c194189bf776e71797ff7ef832abab9245f323a79c844784032eb3c6c1e2ea854baaeea300d55f521bc4f3962e4ed8784489dcaad9fce7910c242c1719c7db
SSDEEP

12288:A7PpgVMJn0mCoufxPvAfuN8yuF82NLGC0ewHxRcU5oXq+3Ut:6H94xsunuF82Ny3Ywq3U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/E700_QUO.EXE

Files

E700 quotation20111209_PDF.img
.iso
E700_QUO.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 606KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ