Quote_JUN75698-LD8972390[.]z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quote_JUN75698-LD8972390.z
Size

897KB
MD5

9cd5f46e90da02f0412c71ef8e02b5a2
SHA1

0c69ab2582ed674102c4d1244c6908c9c8d3ca62
SHA256

6472ba0968eac5173f6171210e9f29d592b902e1d64800f34a09e5aa1641a98f
SHA512

8a081db9dd4a69920e6dd26b4f7b65569b93036383bf5cff4218e45205f0204a1ce1ace35634598a548e6aec8d635ba4801a9d6c86c551d3965142fca4a25003
SSDEEP

24576:e+/IoTi+QDkLjNvZV0kcxVR2MtCyMBCnrLhx:z/IoMDkdRV0keR/gyMB6Zx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quote_JUN75698-LD8972390·PDF.scr

Files

Quote_JUN75698-LD8972390.z
.7z
Quote_JUN75698-LD8972390·PDF.scr
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ