Request for quotation for order № TGA-SF-2024-077011 vessel[.]pdf[.]exe | Triage

Resubmissions

07/08/2024, 04:04

240807-emxzbs1amj 8

07/08/2024, 03:24

240807-dx65bazcrj 8

Sharing

General

Target

Request for quotation for order № TGA-SF-2024-077011 vessel.pdf.exe
Size

629KB
MD5

960c0ba479333e641ab2b9dbcf78b44e
SHA1

65a2a82c39070498fc1a2f535a8518f326801fb2
SHA256

158be98065957386aed44a81495d6bbac8b60ea3774fd0248fb7e83b71bffb6c
SHA512

48d4f22505adc880a2280a868afb4c6fa966254e3745e34ca6eee2189aeb0a7d00d3a723d8d8583ae70e3ba865636ae6b2cd51909f100638256ae6ef14c4e302
SSDEEP

12288:Ubp82iNLJF0/IyU3WtxESWgRrGFtgQWCaio6Oz1gsky0:UC13EXUmtxEEd8ySapF1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Request for quotation for order № TGA-SF-2024-077011 vessel.pdf.exe

Files

Request for quotation for order № TGA-SF-2024-077011 vessel.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\Client\Temp\LAHtcxcltZ\src\obj\Debug\lphe.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 618KB - Virtual size: 617KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ