a5d2422238cd2d0a94e38de3a0361c1a81b9ff33991b75c5b0f650eb38a04c05[.]gz

Sharing

Copy URL Twitter E-mail

General

Target
a5d2422238cd2d0a94e38de3a0361c1a81b9ff33991b75c5b0f650eb38a04c05.gz
Size 1.6MB
Sample240423-b3dzlsbb27
SHA256 a5d2422238cd2d0a94e38de3a0361c1a81b9ff33991b75c5b0f650eb38a04c05
MD5 cb1900ab30cc7d80a00a066ea328a9db
SHA1 59023a877a7f459e9114070b4cdaa7034f1adc26
SHA512 17dc8d4f14e767412f44fe09f5f6eefdd92ba1bdb51531b88d99f58f8e20e60b8e307c2a891294683d6b1866dd1f1c8770ae5caa5bc1d6dfd6a8289257ffb4bd
SSDEEP 24576:iMkT4gLKu9KKozJQd/HJNRO/BqM6wIJp4m+3bu8U2flxAv:PkTpT9K1mzyqM6wW4mEQ2W
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quotation 20242204.exe

File Explorer

a5d2422238cd2d0a94e38de3a0361c1a81b9ff33991b75c5b0f650eb38a04c05.gz

.tar 1.6MB
Quotation 20242204.exe

.exe 1.6MB

a5d2422238cd2d0a94e38de3a0361c1a81b9ff33991b75c5b0f650eb38a04c05.gz

SHA256 a5d2422238cd2d0a94e38de3a0361c1a81b9ff33991b75c5b0f650eb38a04c05
MD5 cb1900ab30cc7d80a00a066ea328a9db
SHA1 59023a877a7f459e9114070b4cdaa7034f1adc26
SHA512 17dc8d4f14e767412f44fe09f5f6eefdd92ba1bdb51531b88d99f58f8e20e60b8e307c2a891294683d6b1866dd1f1c8770ae5caa5bc1d6dfd6a8289257ffb4bd
SSDEEP 24576:iMkT4gLKu9KKozJQd/HJNRO/BqM6wIJp4m+3bu8U2flxAv:PkTpT9K1mzyqM6wW4mEQ2W
MD5 SHA1 SHA512 SSDEEP

Quotation 20242204.exe

SHA256 25adcfe6b38aead70b4b0020ecba72d0343b6f3d3bb406100593b7f1349e0300
MD5 603c7916d424615645d6ee0fffa00011
SHA1 6f464f23eb81606067f93036dc5cdc61f7bb855b
SHA512 f400834902c5886b680fa8376fee88c77ec352b0a00221e98fbe268d71ac6feb0826fb5c53d71cb66cc457d6b3a64c3c881f059dd75bb9b097d51868ea07cf90
SSDEEP 24576:7MkT4gLKu9KKozJQd/HJNRO/BqM6wIJp4m+3bu8U2flxAv:QkTpT9K1mzyqM6wW4mEQ2W
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

357824

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

346KB

Virtual Size

345KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

113KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a5d2422238cd2d0a94e38de3a0361c1a81b9ff33991b75c5b0f650eb38a04c05.gz

Quotation 20242204.exe

generic