Enquiry_3098200[.]pdf[.]exe | Triage

Sharing

General

Target

Enquiry_3098200.pdf.exe
Size

594KB
MD5

5a4c049cdd59b0409f5c8c4830c3f35a
SHA1

8cc0d53a6da1450e2e6737aa8ebe8c5dd5d428e0
SHA256

59cd0e97583b23237ddbe7b3d7879b07ad0d45625ed3d113ff5b2c23438eb664
SHA512

456d82e03a7b717fd24489a679281d9fa694444a1b935b09120e107a5d58eb642e7ca500e280f52db58cc7690efe6c33c0b1af99a9aa40f27e40abd25b127d42
SSDEEP

12288:j5fQVmCMdpGzxnVA0RdF0YwWsabDru4C65t9:j5fQUWz1O0RMu/yq9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Enquiry_3098200.pdf.exe

Files

Enquiry_3098200.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

QL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 591KB - Virtual size: 590KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ