mkpub_Quote 509241708[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mkpub_Quote 509241708.zip
Size

2KB
MD5

1a9abb51d30493662dbe1405ed8c32ca
SHA1

89d1f10c72de6de3ee55f3d2fa6faa3db4fa9099
SHA256

b4e9f3051b30f01c6f1c4e2c2a47cc35481bbf639bdc1a7d261bfa66ca5b0b26
SHA512

f301e6946a1707d1e9ce65ccb5483d065aa44cd9930d16c76d76bb08804b3939b482e8f72adfd338ebd5b91d2897cb8e3b971eb60a5aad798e30d496bcbcc20c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quote 509241708.exe

Files

mkpub_Quote 509241708.zip
.zip

Password: infected
Quote 509241708.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ