04b266d046d54c6b4af42f033da9e6768f9ad2179c5892b1605eeebcd5da403f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04b266d046d54c6b4af42f033da9e6768f9ad2179c5892b1605eeebcd5da403f
Size

680KB
MD5

9415afd927da2b82e8b7e1c568230a27
SHA1

ea49d10dede074b90ab78e13a8a9503af219cddb
SHA256

04b266d046d54c6b4af42f033da9e6768f9ad2179c5892b1605eeebcd5da403f
SHA512

39e742fb2ee1eb683de818da6cac7b4badf12c4c6ef95bc822f2f3918754b4a63b654eb3270c32cbf5d44819549dbeae5370d3c7c314796a521d031576901728
SSDEEP

12288:3BT120cE9kOvv42CE3RhTmwM9iz6JqkvYKWbtNDL2SP+kzqIWZNJq0Xa:3J4pYAY3fTmPbJVvYfjCSURqqa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATION.exe

Files

04b266d046d54c6b4af42f033da9e6768f9ad2179c5892b1605eeebcd5da403f
.zip
QUOTATION.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 978KB - Virtual size: 977KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ