RFQ-KTE-07102024[.]pdf[.]scr[.]exe | Triage

Sharing

General

Target

RFQ-KTE-07102024.pdf.scr.exe
Size

28KB
MD5

4aab71fbea4b35729e6a1de62c3e9c4d
SHA1

2b4bc1a883fa32a13b095a6385ca54f2a61a1959
SHA256

81902ac66a51c109471bf723cd373ab47a52c992855b9e2dd954090326cac420
SHA512

1eadfc55728d115244ada96a7eb4de174afc34333bad63ec72d0e9f478f07c1c536e91319c1b9bcc7ea0e0a09d5130e21acf8ab5ba5b1fbd1f8441649bd2f660
SSDEEP

384:UHcq28V683SxRkjkpvPDFBpzg3GBqphxAwRfsSlYoxEcn1k6+IGJl:UV3SxKjOHDZ83GBv2xr1k6+ISl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ-KTE-07102024.pdf.scr.exe

Files

RFQ-KTE-07102024.pdf.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ