REQUEST FOR QUOTATION LPSR4596[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

REQUEST FOR QUOTATION LPSR4596.pdf.exe
Size

673KB
MD5

afedbc4accabba77d0c9dbf19797050f
SHA1

7333e8497c58ba78a651586d8059ade8dbc1b00d
SHA256

41a9659c1afd7401afa60b5f613a2dc2df8a60d81efa13012bff19e17d1764cc
SHA512

ce792a725c6c0b2f1ab7cb72d7508ecb9f6f3d50d8aa54e87f6dd2d89c4206fe5db5b5b3823dd95516b68d0ae22d2ed26423099991ea1b118b39a8c8bca6c515
SSDEEP

12288:/BsxaYpdJSF0dHr/RY5dA6n/GhCEXXy6q3QlT7P3b3itCg83pZv11hU4EaEfo68/:OJA0V5Y5dV/Gh5vq3Q1by0f3p84Mfo6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
REQUEST FOR QUOTATION LPSR4596.pdf.exe

Files

REQUEST FOR QUOTATION LPSR4596.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

WpFS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 671KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ