Request for Quote[.]dox[.]gz | Triage

Sharing

General

Target

Request for Quote.dox.gz
Size

524KB
MD5

08a13c690575264c80eb176672fa3f1a
SHA1

c9f315cc2d5a9be126d3482945ba47afcbb1e6df
SHA256

32ed665c77f852b165bdd6aef61b0834bf6f79e5f38e6d2f6a07d52c910dccb5
SHA512

417195bcef1ec71ed9ead62a84fc3606ea100d4d6d14a33047f9906633013f10749e8223697ab4bf20a0294028bc115090667ac6dd915bde7eb07d2a205e2765
SSDEEP

12288:f8H5Lk70LXjVOTUh+vQfegtXtTZ8NQlUA/uMmPq:f8ZLk70LiIntTOKPeq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

unpack001/Request for Quote.dox.exe

Files

Request for Quote.dox.gz
.gz
Request for Quote.dox.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 551KB - Virtual size: 550KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ