Request for Quotation[.]gz | Triage

Sharing

General

Target

Request for Quotation.gz
Size

1.3MB
MD5

dc06332b47519e981cee404fdf633560
SHA1

1445c83d698d08b1ceb90967acdaa97efe000522
SHA256

551af39d6b0f2a184a1130213726b032fb7e0cb40f622cd9a64cbfc32ffad521
SHA512

978572b6058992040d62c9bd5c27d8f3e5cd07390878158fad9e1bd45e07e57d36f10dd538f25a144aa0856ab0821bcc6503143368a6f6731e2f5d52861e1760
SSDEEP

24576:Z2swCQ5p3EUHpkSMwNvtwgN9uICMdouCOG9eUoyKTu6SJY2:4+Q5HJPj9CM/09A3SV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Request for Quotation.exe

Files

Request for Quotation.gz
.rar
Request for Quotation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ