QUOTATION NEW[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION NEW.zip
Size

674KB
MD5

b4480ccc1718e42c8be3b61f926e7f19
SHA1

867b19dfa5e1d56bee8928bbee0e9f02619692fe
SHA256

32279db20e7b5f108afdc431a61a1c04510c81a1da72928ff427d5dfd5ec6768
SHA512

54508d7b68e2d611582b291514e58b0f193511b09c047ab6a39e84d2d1ac8d89c80dc70c6b9b4a23e1eb4cb958729d485103824907c8527a52dee87cff7123eb
SSDEEP

12288:LLTq7346JLzYnXieaW2A/PPD3CdUkQj1YBKn5YRomwLP:/e734QxPWlP/kQCBu5YRoHLP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATION NEW.exe

Files

QUOTATION NEW.zip
.zip
QUOTATION NEW.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 737KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ