Request for Quotation[.]exe | Triage

Sharing

General

Target

Request for Quotation.exe
Size

676KB
MD5

77c650881201dfa0953408f57811e3d9
SHA1

a4aa6b39205e6668c66b6233c9ee3377553edd19
SHA256

3d4ea786fed7c7557db3d0be1333b26ddba5b33ec6f2db706e8db831b1e89167
SHA512

4add81d05f1d4d46450879cd174d70fe8974756c7db4e102ca6417c0749bac44a89f8265c003b8f429a48e8473970e2df5d45e7e98d9c47eadd1520c84e16fc1
SSDEEP

12288:APYPfY7yA9CTmd/eAOfxzmqYbavx7U7UqyxKS1k:APYPgxd/fQx1YGvx7U7UGS1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Request for Quotation.exe

Files

Request for Quotation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 656KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ