QUOTATION_NOVQTRA071244[.]PDF[.]scr[.]exe | Triage

Sharing

General

Target

QUOTATION_NOVQTRA071244.PDF.scr.exe
Size

712KB
MD5

8a03a244560c8bab2ac60b57d5346489
SHA1

42a29c5a1650c22adcfa3d058ab7a8a96f5ad6ca
SHA256

9ee486f00cd2636e094d7770fd2576da31d5cec8905a4c397c24417abe8c5ad1
SHA512

f640e6a076a6afce220df7492e4d053fc5339350ba62b9288def37e595e43f9fcd68e8f6524aced8b6dea1797736682fb777d32c13704a2e6c90e1f2c4dcece3
SSDEEP

6144:Hvxlzs8r2MF1LJqkYRyX481ah6rXrw45wQxe1FlhKO4W:Pxlg87LBeh6zDHc54W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOTATION_NOVQTRA071244.PDF.scr.exe

Files

QUOTATION_NOVQTRA071244.PDF.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 384KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ