12062024_0104_11062024_QUOTATION[.]zip

General

Target
12062024_0104_11062024_QUOTATION.zip
Size 752KB
Sample240612-be1hpsxcma
SHA256 972a7dda5095bff149f1af7542cc12fd585835f6c8aef59fc13b64c4239df208
MD5 f6e36c3893874e1fd49a54a8cfe5211c
SHA1 ae16d1a7737d701c23e9d2fa56653fa65a7d9adf
SHA512 5abefa89964ed7f854efda1730da3b5c4e36962004f81c9ae947215d48b8b767c2bb0057127a8e87cee52d6c4479c915ea7359cf0ccf80523bfa4589f36aa450
SSDEEP 12288:EDfkqQXH+mYigPHIeIr3MOIi83WnXhsv64Z9mmAgJgqDnJEfcfqsu8UDV6jnb:RqG8PHI3r3MOfOv6w7rgqDnifcfq9tkv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATION.exe

File Explorer

12062024_0104_11062024_QUOTATION.zip

.zip 752KB
QUOTATION.exe

.exe 767KB

12062024_0104_11062024_QUOTATION.zip

SHA256 972a7dda5095bff149f1af7542cc12fd585835f6c8aef59fc13b64c4239df208
MD5 f6e36c3893874e1fd49a54a8cfe5211c
SHA1 ae16d1a7737d701c23e9d2fa56653fa65a7d9adf
SHA512 5abefa89964ed7f854efda1730da3b5c4e36962004f81c9ae947215d48b8b767c2bb0057127a8e87cee52d6c4479c915ea7359cf0ccf80523bfa4589f36aa450
SSDEEP 12288:EDfkqQXH+mYigPHIeIr3MOIi83WnXhsv64Z9mmAgJgqDnJEfcfqsu8UDV6jnb:RqG8PHI3r3MOfOv6w7rgqDnifcfq9tkv
MD5 SHA1 SHA512 SSDEEP

Password

infected

QUOTATION.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 19b604df73a21665949858204d634fc31077cc0b1c0c02f53712b2cf3b5e8bc0
MD5 ae54788d08becd55e2b37644bd3a415f
SHA1 1cfa4e42bfdb310216232b98078058613a22bd23
SHA512 c12a405c4cc75c18d804c00300f4de326c1e32ddbd7dc72d11fc0ebd75aa20a59198639b7b39715bdb09e5f57285e7cc2d0118a43ea9f89dd18f956fdc0951c7
SSDEEP 12288:nbpD3HH3DI+jiNu1r3jhWvk4Zdmm8gJgoDxJ/27+LHeMbGIfauCRUDJM:bpjH3DI2DAvkwbvgoDxESCMbGIyTUFM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

790550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

SbRTP.pdb

12062024_0104_11062024_QUOTATION.zip

QUOTATION.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

12062024_0104_11062024_QUOTATION.zip

QUOTATION.exe

mscoree

dotnet