QUOTATION_NOVQTRA071244úPDF[.]scr[.]exe | Triage

Sharing

General

Target

QUOTATION_NOVQTRA071244úPDF.scr.exe
Size

170KB
MD5

67d6a0a61874283a9bc7e1b8189432df
SHA1

c3d9c129da212ec1bc79b0059c6e6267b209a2d8
SHA256

c2670beab3a197ef9f14a748f6b6ca0ef65f85085cc1952d3ae079c49d8e2f44
SHA512

de299721d71a28564f724c44e019b013cd24974022f39ed7457132599bc24506a8329615921d85cdfaca3d859ef0abb223b9a78f1969eb23e14db23cafea4a0c
SSDEEP

3072:xZZnWRLarVjB6ibPde98yljJuKOIEJ9uGYVYCzKoJV2IePUs6gGK1:xfnWaBbPN5YxWk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOTATION_NOVQTRA071244úPDF.scr.exe

Files

QUOTATION_NOVQTRA071244úPDF.scr.exe
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ