Quotation 22001625_REV001[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quotation 22001625_REV001.zip
Size

629KB
MD5

acd4723d53c941b6468dc28e0ac4621d
SHA1

9ad9e5279a7707103e158ada91e62216aaebb355
SHA256

cd55e3b04ee2d643c68d158d80393b418a46f903c08dcc6f23085b12fa26d38a
SHA512

37b131fe4b9446cf3bd575816468b71225045cc02ac555fbd046a884581815cce9a50df2e68f96cdcea9ee9e786b8b9cfa4b2a31f20db6cc1416a22fada352f4
SSDEEP

12288:jxfnwZDmu71OHIUUN09NRQTSgodfQy1X5pT3XF0+gFwUQHSkvyBGiX/4DLTJjozm:jF6au7QHANkGSfT1Jd3XFSlGCGiP4DL7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quotation 22001625_REV001.exe

Files

Quotation 22001625_REV001.zip
.zip
Quotation 22001625_REV001.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

BtHj.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 646KB - Virtual size: 645KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ