New Enquiries Quotation QU021182[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New Enquiries Quotation QU021182.exe
Size

685KB
MD5

fc39aee1e5f8284dbb1e99dab5518c4b
SHA1

9d038118934f90fbd0efdfdcb355fdf921b0942e
SHA256

1875aee9f50a8e2389a125c2f77998685ee0d7d7d20b7d3f1ecadf841564e654
SHA512

f845bce24329f63beaa98b0330b4e45964b6be2807b6489ec6acd812e62688f0d194cb36987638207bc99892e9a7a9d3dcf51cd06234aac159bdcf80747656b1
SSDEEP

12288:NsM9hCaa2F0F7P6PXO08+VslZB+NTM/H7FjFcJDXTzlQzWiu:JUm0Ftq2D37FGJDXTz3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New Enquiries Quotation QU021182.exe

Files

New Enquiries Quotation QU021182.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 678KB - Virtual size: 677KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ