QUOTATION_JUNQTRA031244úPDF[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION_JUNQTRA031244úPDF.scr.exe
Size

3.0MB
MD5

518f93840935d0f350df51860e3e47c7
SHA1

360533b90b03e14af849d87594397b0ccbae91ac
SHA256

bedb3e0095bb830691b6fa3cfe70bfb469482dc779e9f5e67ec66de18d006bd7
SHA512

8748bb8b267579a7f97b0803022fd7a0ae75edad14792a34d45249c4edb9a5eee8b69114e47da9e31f34e6292f755b6a703ad4c4d15b1f68f203c67a51366b56
SSDEEP

49152:7nYC36QSyS6dbB/XZQfVx0YIdVsE+Y0CBj1t2GVRpJljSqL0DuEj7N6+:8CKDJ61uxGllVl1t7bJl+qY6Ej7N6+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOTATION_JUNQTRA031244úPDF.scr.exe

Files

QUOTATION_JUNQTRA031244úPDF.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ