Quotation[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quotation.rar
Size

645KB
MD5

98ba7df8f3bc23dcb84db646326701c6
SHA1

4ecdccd221195e84a81adbf119bb19413a362289
SHA256

fa725f4ec11183732eeb9f27f9a845932496540a3e35acc810d1619586ecdde8
SHA512

bc2e2b96624cc7085cf15c19e84692b6da0c2429c293ce91bb97819d2e6cf62a1f98f5011b789c1d08aaac2968829d120e7677d0cc1012c8f4c19a4f0d061231
SSDEEP

12288:0BoGomOmhv8o7bMDCcYrrqS6i0nnnYVu81Dn0IfkBlrnc6LS1cYHeUihOy7KGTTt:0smq2colOYVXDn18DLc6LocYOQy7Lt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/LkF28H7cqroAApT.exe

Files

Quotation.rar
.rar
LkF28H7cqroAApT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 751KB - Virtual size: 750KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ