Quote RFQ #00926720250204[.]pdf(39kb)[.]com[.]exe | Triage

Sharing

General

Target

Quote RFQ #00926720250204.pdf(39kb).com.exe
Size

3.6MB
MD5

07a4d2a1981e4159e744e3f0bb8d655f
SHA1

fe47d1646972e85667408a28d8db2f2c17b7a313
SHA256

ce54308e4ba6119f23d6e430e936d1f7dc5f8156c61003e05883c7adbf94e9d9
SHA512

b03cd73c43a0e6a536857b523fa5c96910bf8a73002bb4bd7b8315f951eb9e1f625e3e3804a31cec689b6d8a427df600547cf4becf8494c3c3397a2382a55a4e
SSDEEP

98304:6inq/fUlXQu4UB5uq8yPk4KVJgGSg/RSpSTddPTC:3q/fyD4UAlyfKV7Sg/QwTrP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quote RFQ #00926720250204.pdf(39kb).com.exe

Files

Quote RFQ #00926720250204.pdf(39kb).com.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ