954982b60ea72c26e5d57385ee063a5b-sample[.]zip | Triage

Resubmissions

02/05/2023, 17:44

230502-wbh5gabh48 7

02/05/2023, 17:42

230502-v97p2sdf9z 7

02/05/2023, 17:32

230502-v4bqesdf71 7

Sharing

General

Target

954982b60ea72c26e5d57385ee063a5b-sample.zip
Size

542KB
MD5

bd485d28ab0ae032d2fb0ac8aa5931f1
SHA1

d11f48689e7b7c670d22534328f4f4abce0daf04
SHA256

defaa04f09b82a4408ae50171fdf9feaa8853182376fbe424bc5fc3091725c1d
SHA512

82e147adc1e7163ed002613519e85a4d5429e83630326a65957ec864046e1af253d91d6ea4d21a6b90e47cf08259db718fc72d0fccd853750f3fce1e775faf91
SSDEEP

12288:Wa1jBepv+VcbkI6qsqpOfOtlxneVSg7RcThJiqMFprziNz9C/CnRx:Wa1jBeOA4acfOtzeHGT1MHrmNgqRx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/QUOTATION.exe

Files

954982b60ea72c26e5d57385ee063a5b-sample.zip
.zip

Password: infected
QUOTATION.IMG
.iso

Password: infected
QUOTATION.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 602KB - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ