Request For Quotation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Request For Quotation.exe
Size

355KB
MD5

ff1786ef2ee848b48df39a295ec31f7a
SHA1

ba5374420dac2ac5fbf3ee69235e9cd4f230eae4
SHA256

7427d06f2b327f78a411b64c3cda440494f6320b11ca7dbb5357d85d90c5508c
SHA512

6bcd0b74d9ed36a19b898d921876c5b6902f0af95fb5c41b43fa1e98e16703314ec0912b20132a759db5966521cbdef36411507520098948045e56c9e70dd913
SSDEEP

6144:z1ImGfCoc3uNmJVJzjtKL/fUMIu5T1+y66IwcNYVjKDKi:fKJ2B0f/Isl6EcNwGO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Request For Quotation.exe

Files

Request For Quotation.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

MKkoi.pdb

Sections

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ