QUOTE #21440170[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTE #21440170.zip
Size

434KB
MD5

874d4a7162f8ee4635061144702dbe38
SHA1

0b505ab8100e38f541bcfeb4b2b2033d8706f817
SHA256

f57e9ceae78d2f7a640f152f6677ac5323164803586c19154cda21c411b9c3bc
SHA512

4a14c87de8e27b9f30e9ebbaeb818e4fedad0771bd58d8acdb94855d682dbee4544233ebd311f958e35b45e7b6db83037eaa3af8baeb3cbff8fea74f4be612c4
SSDEEP

12288:NCkq+krhG7iiEtnm38FHLOMUGi9GC14gfv0Zy:7q+Ehci9tnE8FHG99lJ8Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTE #21440170.exe

Files

QUOTE #21440170.zip
.zip
QUOTE #21440170.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 687KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ