05a0d614857812cf60e42afe539fe93b

resource
unpack002/QUOTATION KHEM0004 KHEM0005.exe

SHA256 6aef2de42e7435e24a9dbab0ad4564a2403d9cac46516bbbf91739653e59bc0f
MD5 05a0d614857812cf60e42afe539fe93b
SHA1 65cb75611584312f38d8ae2ee85cc642dfdc0ff5
SHA512 9a0ce6c7e0cb354c24343cffa25dbbd69539e0570ad4952226dd2faf75349ee0ab384ad53971160aca3a903ebbcee4914c9e3b3a05389067c858c8c0bcc24441
SSDEEP 24576:yAbEAKbFImthPi3/Hx8YLHe4qxBgLiwHYoFIGKSDC1:XIbaaqzLjHbIGKn
MD5 SHA1 SHA512 SSDEEP

QUOTATION KHEM0004 KHEM0005.lzh

SHA256 4d20be91c3e1dae5c1958e864c9f4245e4c0f803b9e342fac97bf8eba34fdb9b
MD5 90b280817afd7d345c1e74e50085a420
SHA1 3d61057a41c1be755568de1c20b6658b0147c8cf
SHA512 8a87898c5be156c381c6ab998f597a77d2cb862a07ead058025ce00f198f3c6871f7493b4e619c1877d045f772fe7badef5b4b8c2b8eab323e5c20f0c649444d
SSDEEP 12288:35d9GwamnISBXpuHd3i6SkMZVTVfD4npqvqTQNnJA4MlvE8siZgX:330tmnISFpuHdS6SkMZVTVr0EFJtcJj0
MD5 SHA1 SHA512 SSDEEP

QUOTATION KHEM0004 KHEM0005.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b4b2d03bc3ab57146ef1963936d3d054c0b5d055cf9a3f2862fd8b25733a7a63
MD5 08bc001583e1e146dda839abbf439a02
SHA1 0474f02da4c4574f80f94247436650c163627e67
SHA512 0f79ab2a8ae0d71c1a0747205dd5472f505baa123c328ff55daed253de534f7b7d3df84e8e6fa6f58dbd0035e152d6f189c544b0284f182edc0a94550c041b99
SSDEEP 12288:5csLjeStr3eA5KUlJHK7zqqP/qmzvowFdBmo8yLi+x27Rw65EUfAZ78Da41gwnab:XeKvKUlEVHDzgwFmFTGUwTU+78DaC3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

880446

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

email-html-2.txt

SHA256 02cef67a6044f58c12f4a1e6c140298ba73a5c99db1ac439daf1c8896d692faa
MD5 e86140a74ac9b6540d52af3313589807
SHA1 cd24313d80f9f6669a36539acb3ef4f0eff42ef5
SHA512 fc7cc8f58c0e993cbb618a257f6b293be3f99b3aeb1961ba7ea44de0f7c66fc27cb8f56305d62b03228d28a2c73d8e8ef69c191cb97d370920bb176c6488a105
SSDEEP 384:qwm/mQm1EOvmanfxTjHVSiCBNYQYEc9XHv:qwm/mQmWOvmanfxTjHwiCBNYQYEM3v
MD5 SHA1 SHA512 SSDEEP

email-plain-1.txt

SHA256 5286d9692d47ff8dd2c8c3dfbd8c2026d20a9003defa5b497833d89132a78a0b
MD5 44a6fed8897d040eb948f613ef7840e3
SHA1 9979cd4ae85368c4edf961fec334e650e29ca961
SHA512 85c7eb19c60a369d119775e2317204864952fe9b74cc5a26a4ac6cb23c62c4f5790924558bef0092f502f20ad59e0340176287a9a55bfce1e204aeab1b89aeb0
MD5 SHA1 SHA512

05a0d614857812cf60e42afe539fe93b

QUOTATION KHEM0004 KHEM0005.lzh

QUOTATION KHEM0004 KHEM0005.exe

mscoree

dotnet

email-html-2.txt

email-plain-1.txt

Sharing

General

Malware Config

Signatures

File Explorer

05a0d614857812cf60e42afe539fe93b

QUOTATION KHEM0004 KHEM0005.lzh

QUOTATION KHEM0004 KHEM0005.exe

mscoree

dotnet

email-html-2.txt

email-plain-1.txt