0427907673a5d2e71df2724bded3cff7b11776bf498bc04f09d2cfa5c52d3128 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0427907673a5d2e71df2724bded3cff7b11776bf498bc04f09d2cfa5c52d3128
Size

344KB
MD5

198b6b2a85236c5b9bc1b8b24e615f70
SHA1

907ae902ccc2c085255be7a9ebb7f6dfd459b9a3
SHA256

0427907673a5d2e71df2724bded3cff7b11776bf498bc04f09d2cfa5c52d3128
SHA512

16b0b3264f80a93ae534331967245adb94b29921176593f05aa9131b247eccf8f5e97283f0c0a6ed90ba1c61db6d56f1c008922bd79aa8d843e5cf128e7a523d
SSDEEP

6144:T0F9yEUTy6fCn8DGSKv/8aIoPB/wWZdDNRxFIMEcaeMlWcjzicfL17NtJDRYSn0l:43yZG5nqGSKv/8a39dxRxFbNMlFjziSG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATION_SEPT9FIBA00541·PDF.scr

Files

0427907673a5d2e71df2724bded3cff7b11776bf498bc04f09d2cfa5c52d3128
.rar
QUOTATION_SEPT9FIBA00541·PDF.scr
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ