1492c494bfed61556e33846f6b3a3814 | Triage

Sharing

General

Target

1492c494bfed61556e33846f6b3a3814
Size

1.0MB
MD5

1492c494bfed61556e33846f6b3a3814
SHA1

27336fac66222422ed1f8c0ae42d54ee9451fc4d
SHA256

9b0eda20dfd4015081499a6d7db7785fc019543620b6e0cf583d110cacb00b6b
SHA512

8d78b6690ae75e622c7e34d31882cc20a258c1b7b337bcd67da134f865b70683579bc6b8670e46178915166990c7742d26eeeea4dcad2645d33f3684c815e52f
SSDEEP

24576:qFRAR/7+Pf2tI82dxNMQ+l7AiZsLsYpys:mARgfq2+nAiZMxB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/CTM request ETA 2 August 2021.pdf.exe

Files

1492c494bfed61556e33846f6b3a3814
.eml
- http://www.quadrajet.ca
CTM request ETA 2 August 2021.pdf.exe.7z
.7z
CTM request ETA 2 August 2021.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-1.txt
.html