REQUEST FOR QUOTATION[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

REQUEST FOR QUOTATION.exe
Size

634KB
MD5

58608096ce2d4f26e38197bf660d1e4b
SHA1

fcddc44c42c63a3f6ab3149aaad2929943ac2f00
SHA256

2f054223acc9d0ac0da01f6118a31f5d8f0e89fda29116db12bc139d2ce1a2d3
SHA512

082e05cdbeb79b8d2936fd0c224ae3b2dbd798f9872c92845cfd8fc9052475e55af3b39ba6f8cf739e6a66441065772ca1b8aa991ac26ad2d54da420d926aa47
SSDEEP

12288:zSqFxkzqHKMb4xHm8XFrs2t7aDHYUMW687krfjOvYSQD6KQqTOyjVCuki:zt+z87b4xHm81rn8HYpccCvY5D6Zqaup

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
REQUEST FOR QUOTATION.exe

Files

REQUEST FOR QUOTATION.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ZgIcqDU.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 632KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ