6399992f2d716fab6b552a776aa2b1e7efd0ca7adddfaf4bf1d2a2a07929ce09[.]z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6399992f2d716fab6b552a776aa2b1e7efd0ca7adddfaf4bf1d2a2a07929ce09.z
Size

72KB
MD5

0917b3d9d8c4c2728c82fcc04a0a73e8
SHA1

c0cb532e4284652408fe86465e6937c259f587bd
SHA256

6399992f2d716fab6b552a776aa2b1e7efd0ca7adddfaf4bf1d2a2a07929ce09
SHA512

f620ed25f0b2fed3e09c4a0ff13f99a7bd3f952b6f5012b3017d3f6ba24397fa378adbd489fdb86c4fd94835e2acce3f6b1f37949cf2aad6cc646a1512a982c1
SSDEEP

1536:ZTL34HQfW/B3a7gayfT7gKZ9IXcEsEG7ZLmAlAtbAv56XM6Y:VL4Hxa7vy4IscE/GpXabB/Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATION_JUNQTRA031244�PDF.scr

Files

6399992f2d716fab6b552a776aa2b1e7efd0ca7adddfaf4bf1d2a2a07929ce09.z
.lzh
QUOTATION_JUNQTRA031244�PDF.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ