QUOTATION_SEPT9FIBA00541·PDF[.]scr[.]exe | Triage

Sharing

General

Target

QUOTATION_SEPT9FIBA00541·PDF.scr.exe
Size

377KB
MD5

5b9b9e801b2411512e4bb4e90c385211
SHA1

115805064b256d339392bb33002bcee64a07c2d8
SHA256

0ecd4dd369438da55900b76497d47e3fcc7949d0373fcaf1d1366affcbbfcbaa
SHA512

ada5ea7e7f0ec4a842e2b2962df3f6684730844895a3f153f81d84f8139903903c747fba6c057cd74f310c824de826327facd7123e282a610269f6b5e6ad9305
SSDEEP

6144:BMF9SWorAtYRwCQXkY4PxBlrCF3tOYF0gt/nto/pP+/4kR15I3ULUR8Y7:BMFUWorkKwZb3NXt/ne/YiUi8Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOTATION_SEPT9FIBA00541·PDF.scr.exe

Files

QUOTATION_SEPT9FIBA00541·PDF.scr.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ