QUOTATION[.]zip | Triage™

General

Target
QUOTATION.zip
Size 628KB
Sample240621-ppgp8szbqf
SHA256 0ba246201becf94f8fb1577ceb71eec285f79186673b81aabf5f14726c1c5cd4
MD5 4885bd9eb8778df7bc341c161e82758d
SHA1 e3c72b943430acd6df540bd256d194d9389cef9b
SHA512 1b43efe4f2dbef90cfd9927353e2d6c846493671588f8746df0be1945eed11bdd24bd89f2ea9b009955a843fb86b7235703f5d0cff917b7d2edb5893cf26e6f7
SSDEEP 12288:uitDQz0zPbVj8GMMmm2slw8DCVE2MWjQF/hAFDSgd10KoTtfUFOEsQFsc:Tte0PJj8GMMm+3Yj3Sgd10xThUFoxc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATION.exe

File Explorer

QUOTATION.zip

.zip 628KB
QUOTATION.exe

.exe 670KB

QUOTATION.zip

SHA256 0ba246201becf94f8fb1577ceb71eec285f79186673b81aabf5f14726c1c5cd4
MD5 4885bd9eb8778df7bc341c161e82758d
SHA1 e3c72b943430acd6df540bd256d194d9389cef9b
SHA512 1b43efe4f2dbef90cfd9927353e2d6c846493671588f8746df0be1945eed11bdd24bd89f2ea9b009955a843fb86b7235703f5d0cff917b7d2edb5893cf26e6f7
SSDEEP 12288:uitDQz0zPbVj8GMMmm2slw8DCVE2MWjQF/hAFDSgd10KoTtfUFOEsQFsc:Tte0PJj8GMMm+3Yj3Sgd10xThUFoxc
MD5 SHA1 SHA512 SSDEEP

QUOTATION.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b710ee72c7dd328b42d777ffc7d5be5e37ddb368039ca10aed7c27ae86a7efb2
MD5 1589c3007d00dc76d45c70a98af5cc24
SHA1 29b0a83636fc6ec4ed1451518d27cfe5720d488e
SHA512 ca2884ff83b79ad78e1977502d986e630c6c4265a92a0e921bb9ee73043c8bbee1885ae942b486120f31df8c5dd6b9c301fc96edb1b465107dce042fe1c394d2
SSDEEP 12288:nEDuSuyzAzPbBj8G2MgmislwmDuVEQMGjQF/BAFDugd10K0TdfUFOEsaJ:nauMQPdj8G2MgYLmj5ugd10fTxUF6a
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

691582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

QUOTATION.zip

QUOTATION.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

QUOTATION.zip

QUOTATION.exe

mscoree

dotnet