Maersk_Quotation[.]exe | Triage

Sharing

General

Target

Maersk_Quotation.exe
Size

692KB
MD5

b3654d3d061d7dc8c3b2cc9360c93e28
SHA1

c697dd3dd48a1d333512a93b1e718b7b4c337b11
SHA256

fceb05650abd8b77e8e0b2e685ccafd2c57933986a89334f41df39c8843a37e8
SHA512

a0fb6d1fbba3a1bf0322367600e4ca1ebf95a1f23d4f5e4cdcf25eda405538d9c4fab996c9bca45d07cbfd7bc9b8e270a6d0e60b1c762b65d116f39bec1f41ac
SSDEEP

12288:3Gx504bFtx504bFWx/I1w9hG/C1aVQxqPzzc37+:2w4bjw4b+IqaK1Zx6zG7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Maersk_Quotation.exe

Files

Maersk_Quotation.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 672KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ