f050b1a4bc8f65e3f7e246c5f675b6b0bf0d02e23204c96f2eb40be388741fb4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f050b1a4bc8f65e3f7e246c5f675b6b0bf0d02e23204c96f2eb40be388741fb4
Size

514KB
MD5

c4bde4e06ae4ac3d51b82ec175a87644
SHA1

db090b7172ebec7eaf9a1116a86f55e97919129f
SHA256

f050b1a4bc8f65e3f7e246c5f675b6b0bf0d02e23204c96f2eb40be388741fb4
SHA512

aaa6c56630aff6e90dc57c0f4672088d7a45bb9093b96487ff9aeb798a7dad47f516e4a3d2f9478a3d8484a3d02f8e5b27359d4aaf47520832955d602e1fdb94
SSDEEP

12288:QGSBiyo4CvUA2UHKysqqEzaCIX6mQ8I/ZICVkaVlbij:3oiyoiURqgaB6mQnRICVkaVluj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTE FOR NEW ORDER.exe

Files

f050b1a4bc8f65e3f7e246c5f675b6b0bf0d02e23204c96f2eb40be388741fb4
.zip
QUOTE FOR NEW ORDER.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 524KB - Virtual size: 523KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ