Request For Quotation_01324794[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Request For Quotation_01324794.exe
Size

68KB
MD5

5fffcf1ccc6687bd7125099278a0785b
SHA1

bbf2ccbda76ac1634bc672dbb6ca9e1940dce6a9
SHA256

8bc4f4ce5d6c39ec058db68d3f76ea4c1b6d1cd973534dc2e4f624d17d52f904
SHA512

0d604d52812742cffae262ca1928b176fec8b9aa798e2d5c74e4e3b088580fa68af961bb476e3537b18e254993484783cfe88b20ed0ce9bea00410b6256fecec
SSDEEP

1536:ESYOU3ukPVxu+jQn5lOtjzoACK+yw09HXdqkSZZZ3g99ib/:fYCeVxu+jQn5otjziK+ywMHX3Utb/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Request For Quotation_01324794.exe

Files

Request For Quotation_01324794.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ