1c58bf87688e2eff2a8873c9b597c2a4d8d7d50ca98755f953d142e691dc8837 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c58bf87688e2eff2a8873c9b597c2a4d8d7d50ca98755f953d142e691dc8837
Size

658KB
MD5

ffc5164ef6fca8803a47eddf03bd3593
SHA1

fbd6b2f6bbb7e684dc4fbadf39923048ca1cc77b
SHA256

1c58bf87688e2eff2a8873c9b597c2a4d8d7d50ca98755f953d142e691dc8837
SHA512

769678905037e212ad652fde3c5eec849cfbdec7e4b1ea6f05247d6a6251cc6f47b610922e3de58033d9f80cdcb7d2546348da193f5dacb2fab5a83b0b9fc2c2
SSDEEP

12288:CMU4Hz6KPIKO3UAV2S2uXpYVkZV7/panQc42HxYUKibPwyvhG0TNwVISih1Y:9U4Hz6M03DV2LGpuKCZHjKibPwyNJAIC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quotation_V-23-603-017.exe

Files

1c58bf87688e2eff2a8873c9b597c2a4d8d7d50ca98755f953d142e691dc8837
.zip
Quotation_V-23-603-017.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

SzYLgDj.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 670KB - Virtual size: 669KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ