db96d031ae816895a48e39391461c01fcd2452739ecad88fb445bb02a540c124 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db96d031ae816895a48e39391461c01fcd2452739ecad88fb445bb02a540c124
Size

1.2MB
MD5

749e7f569cdb6bf455ce47da247f945f
SHA1

70d74c7462c55a413eeab66ac284462e4aea1d09
SHA256

db96d031ae816895a48e39391461c01fcd2452739ecad88fb445bb02a540c124
SHA512

570220781a4b86d7d7c42221b641e0d15a76ea31e98fbfba74e201dd5fce591fd0cfb4e1b35c7064a63e2721b54abf73208c139a3e4ff23f6a47e7a18b913f93
SSDEEP

6144:sB52q3MKqqhJWC9JtOrTR7WJ6EPycAsxKK40/9NctKv9zM7WXE:sB521XER9XAN7WJ6gT/MtKzWd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/New Quotation Preview Image.exe

Files

db96d031ae816895a48e39391461c01fcd2452739ecad88fb445bb02a540c124
.iso
out.iso
.iso
New Quotation Preview Image.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ