2eb731378a2f79716c53d204c3bf9d9f4f1f1d1416b68b255fcd605104e3846b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eb731378a2f79716c53d204c3bf9d9f4f1f1d1416b68b255fcd605104e3846b
Size

539KB
MD5

213112f533e44fef4caf878da0ae53dd
SHA1

1bc3b907716980029ac7e742549a8623661e65bd
SHA256

2eb731378a2f79716c53d204c3bf9d9f4f1f1d1416b68b255fcd605104e3846b
SHA512

b953e6e2cebdb3ca4bacf108523c45c31702c248877fd983493f1725301b202cf231761f6f1d8d6d9f39bd5d84940ad179e552def76016a7dfde4c5d8cd5ef1f
SSDEEP

12288:8z16cZapDgPZAJ+2gFSYZOdeTFP9ANxLdIpFj8/NfbMbQlBQ:8GZgPe09Zg8P9GzIpFI9b02+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quantum products xls.exe

Files

2eb731378a2f79716c53d204c3bf9d9f4f1f1d1416b68b255fcd605104e3846b
.zip
Quantum products xls.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\_RU\29.1.2024\WaggerApp\obj\Debug\WaggerApp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 579KB - Virtual size: 579KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ