Quotation specifications draft20001[.]rar | Triage

Sharing

General

Target

Quotation specifications draft20001.rar
Size

687KB
MD5

a29a3627858399ef50e86d41bb8b31d8
SHA1

2571206ee8d59606df9ebdfc426f9a3bdd1696b7
SHA256

174255ee4e6d74fb86b6f16eae3d0298cef64bc991fa8e6c8e9d13b958b657de
SHA512

546b08738513aaf7d18862cd9e2703c3df52e2b1427fe9998c697d56baa5958cb8150817900f1f32ab900d734608f87c20b4d2a826b1748450200d85166d1a2b
SSDEEP

12288:mLhh7hNqvyvC/xIylghrOhFTEpT3pPBtKDeQopaMWpfB4NHR/sEK6Yg1h:Uh7DqK6SUgh0NSTaB6/TN6EKtO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/Quotation specifications draft20001.exe

Files

Quotation specifications draft20001.rar
.rar
Quotation specifications draft20001.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 824KB - Virtual size: 821KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ