Request For Quotation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Request For Quotation.exe
Size

692KB
MD5

ac85688ebb0afb0d9994f6987cd43848
SHA1

24b96a93657b93b4f00f94f5b13e0f24d304935c
SHA256

0074ed761aea590abca0a0f0fe2d58a82f0b9cacc91cc108d122a0091329ef84
SHA512

d0f4d33db9095ad48e90808744c53764cdca1ebd5989f74aeae29f5b519c339a89e7d3ead21a43518de21a8c6532f9e43da6a81c97b224f2e605a9b2e45f0838
SSDEEP

12288:cNhmzZBEP85fp0uJcsdRs3OPVM7BXA6LYqOfAo3t9cpP5WkFfShww07EapmWdCRS:F9BEP8Fp0uJjgOdM7Bw6LYqOfVShZFff

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Request For Quotation.exe

Files

Request For Quotation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 689KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ