Urgent Request for Price Quotation[.]r00 | Triage

Sharing

General

Target

Urgent Request for Price Quotation.r00
Size

628KB
MD5

1663ef1daf29904cf83392a9b1c62aa5
SHA1

7e275a110ef4003e1aeb22771295669feaf2fa94
SHA256

74ef3f0a92c7d79145af655f0c56cd660b6eed93d4399d7c229dde68b0eac2a5
SHA512

0b071900d6f31996a77f223880e6fff70d7dc88611de7c4454e69c87304f6ee7d475c851548b5f0147b12e97c3d1cfb7c107d4f3435bffd76787c9246b5d87eb
SSDEEP

12288:NQQeLNY+YbHyXvKDBaq/tRU7Bq9j8UVT1Jx6vZhhHFeeZXw9w4iw:iQei+4SXvKDBb/tQq9jpTfx6vZIeO9X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Urgent Request for Price Quotation.exe

Files

Urgent Request for Price Quotation.r00
.rar
Urgent Request for Price Quotation.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 651KB - Virtual size: 651KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ