Quote 230901-VP[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quote 230901-VP.pdf.exe
Size

1013KB
MD5

23189dc2f5accd014114c72ce654fe98
SHA1

edd8ccb6ce7984df4cd35714d4f36d1c2b5c49da
SHA256

4987bc757cd10db18bc573b0b3bba52b79058500a0c1fdc08eb92dd1f49076a8
SHA512

f9708f09063fac44da6ea5a067a276a4770d67aeb5fae32a529a7d021888a1e17b0b85ff1da85f333bc7ef8f127137ceed342a67d05a4ea3d860abf6bc33da7a
SSDEEP

12288:02NKVY7O6MavWMO6MavWX5opDJ1xGBnvTLeE0MKmeeCLVTk5dx:02NnO6MavWMO6MavWJoJjan7hILK5dx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quote 230901-VP.pdf.exe

Files

Quote 230901-VP.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 849KB - Virtual size: 849KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ