30052024_1416_26052024_REQUEST FOR QUOTATION[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30052024_1416_26052024_REQUEST FOR QUOTATION.rar
Size

646KB
MD5

37e85b67f0cbfd8d10ee7afc5076e381
SHA1

482b5733230afe595b068f9bc7edbd2cf463134a
SHA256

d0440d70f0a7854925473a75ebeca43af5da38c787346d04bfafe8e2f94b4177
SHA512

81464cd309ee68b6dbee92189019fa828aea24490221d41fa56fbc2e0a8c47b9a02ec2f9bebf588d76b81cd9ba2397c2efb1ce5e6928c98a6525d6c6188d6947
SSDEEP

12288:Mv9K7LoAnUxFw/yS667YEIJxNeEHg15I9bkSsLP36UmfhvDM49s+rXiRSjWoJXfq:m9XjSxqxrcibRAPKUap9rpioBfkqwf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/REMITTANCE SLIP.exe

Files

30052024_1416_26052024_REQUEST FOR QUOTATION.rar
.rar

Password: infected
REMITTANCE SLIP.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 668KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ