QUOTATION 22589092[.]pdf[.]exe | Triage

Sharing

General

Target

QUOTATION 22589092.pdf.exe
Size

707KB
MD5

337f191b6b135a5f86e7b79cd29ab42b
SHA1

cf9c3bd673010c18a6a87f98c0c39cb304e5cb4e
SHA256

189d17c7572c0ad248cdbda9fb1fae17fcb30d4bd61ac6497ecc184340869e3a
SHA512

340bfb956cd8ed391be6cd79b4fe570a66cd52a88fde83c4d34585fc1389655db67c8ad9077c3395f1deee520f37ef863506ac6f46796e527ebf087e58191e0f
SSDEEP

12288:uchAckjwxQ/0blzCfx2aPbTqzreKfeCPEUo05sHvAkJ4:lk9mlz2x2OoreK7Pa052oY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOTATION 22589092.pdf.exe

Files

QUOTATION 22589092.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 686KB - Virtual size: 685KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ