QUOTATION_AUG7FIBA00541·PDF[.]scr | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION_AUG7FIBA00541·PDF.scr
Size

1.2MB
MD5

7c10e3355416a58b5a67ad7280fa6878
SHA1

bc18a5c82a11a416888be2342e537e43b18ea624
SHA256

d997738192f067dfc261c68889e5d82cb0a25a7527c63ca5cedc9e1843018bbc
SHA512

43ca245648cf58a01897f2608d86589fe5d780759acd019c032aa284441186b4d95b393ff3d1557122441a6271b90c697935ce0cdc0415b2e0c4dbc3dd06ced4
SSDEEP

24576:30xzMnLUxNBVmeGMzM9eR6925dqshgmcc5j:Q8AxNWneM925jgmcc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOTATION_AUG7FIBA00541·PDF.scr

Files

QUOTATION_AUG7FIBA00541·PDF.scr
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 815KB - Virtual size: 815KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ