Offer Submission for RFQ No[.] 1000145681 pdf[.]exe | Triage

Sharing

General

Target

Offer Submission for RFQ No. 1000145681 pdf.exe
Size

3.0MB
MD5

562639d5fa7ba24a04b437d0cb86c3ce
SHA1

28a283aad84eaeb641fbc92bd770c9e2ef3e94e8
SHA256

0992105e0256566c74a510b9b90dd3b28e80d475a3d8ef50d8b02b82172439be
SHA512

e333402c4ba520903023eb9b2490b182495c237f330be031e9cb305aa73f4ab8bd43f70d6e6739ebbb3dc2dc606b90c4cd565c2f292470ad04b6059eb348edf7
SSDEEP

98304:cCNqJVgNAxxmeRiG8sUzj6CvFXtR0mSFJrM:cCyVHI5GcfvR0mSFJr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Offer Submission for RFQ No. 1000145681 pdf.exe

Files

Offer Submission for RFQ No. 1000145681 pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ