eacf014fecbc0a0b00db0b6de5ae915c2b8aca2325bd62198852ef71b44fe792 | Triage

Sharing

General

Target

eacf014fecbc0a0b00db0b6de5ae915c2b8aca2325bd62198852ef71b44fe792
Size

340KB
MD5

4dc28bdf1898d138990a6751e54c723f
SHA1

eaf878e486af6171a448d0cc8a3cd392ea29b862
SHA256

eacf014fecbc0a0b00db0b6de5ae915c2b8aca2325bd62198852ef71b44fe792
SHA512

50a1ca727f28420713358f8dc2f186f67d16b63901ee94224f1f11dbaf4789f99880047e6d6d8696fc88daaf3ce381346ef928c225c26f3b7b7b3ad4c5358c08
SSDEEP

6144:FoFV0v3P1l1QYN8+FewXv+AzTjzLM27rh85NhF/3ssrFEep7NVApbOp+U1UJT:YVol1QYNFAqv+2zT985NhF/8sr77NqSK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quotation Of Servcie parts-Shipping Quote.exe

Files

eacf014fecbc0a0b00db0b6de5ae915c2b8aca2325bd62198852ef71b44fe792
.zip
Quotation Of Servcie parts-Shipping Quote.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 848KB - Virtual size: 848KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ