quote request STS37802[.]exe | Triage

Sharing

General

Target

quote request STS37802.exe
Size

674KB
MD5

5b084d6fc56a823b7c0f0f2dbcb55a8b
SHA1

4bac0bcd7defccd3ace8b068b1a04dc5323f17b5
SHA256

1cddb92ef3bd9868ad25be68fa8762689f697f4beee5baab3b21efe319e33d90
SHA512

280345f93cc46647116afdd48e2224dc81cbc2c4cf51ef6975c03bffda39c7b67dd36a5b4eaade59cda374ddf3d84a7f012379c107a5f39d8f69a452c83052a3
SSDEEP

12288:3rD60Tsxu3SczcWjFqTp3i/teQvXcwQAA7gCdGKOWZiXheL0KG:7DgxulzhqTI9vXpQCCdFwx1K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
quote request STS37802.exe

Files

quote request STS37802.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 670KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ