Great Lake - Quote#474701[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Great Lake - Quote#474701.zip
Size

629KB
MD5

5aef711274de06f683f537e9c7838db1
SHA1

1b06f51e8d89cc18961ec43622e9e1ce3c2608e5
SHA256

a3636b8f5e8da9b9275cd6cc01b91058fbb21c6a4b627970cef5fa7ca6560d80
SHA512

9ebd914ef387a93ba5aa6b73e613db82457893192fb9884704272822905393258cf913c2e3fa3a8ed2783f2bd5b4837e0a46f6c944b17b6254fd941d1784cdae
SSDEEP

12288:aAN2iFenzXLen85FwI3APp4q8jeBTrcE5VYm8hjnk0BDfBIIeaGqne5Yn6DuMr:aO1FIvF3QqaZrcEHzyjk0BDVdGd5LDuQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Great Lake - Quote#474701.exe

Files

Great Lake - Quote#474701.zip
.zip
Great Lake - Quote#474701.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

LPqP.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ