Request for Quote[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Request for Quote.exe
Size

1.0MB
MD5

fa7cdf065bf67011201cb9cc7762247a
SHA1

1e80ce389997634910dd58c6b30afe02ec299952
SHA256

5e14eb7269d295dd5978c3b7db648c766d8436691a0c8777c345581141c79458
SHA512

5159f570bdbd41e8e755effb0e5a7fc4f8242db7ec35facd5ef296ccd8bf79002b6c4660fa5a25f454b8db129fb80f15f7d3d1cdbcf0692301bebe39b40638da
SSDEEP

24576:xNRXFpfBclB1JYLYZg4+l/9W2MBaz6GMrQuIFYilGE3l2GGh6:xNrR6lyKgplVRw3GaQuHiplpl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Request for Quote.exe

Files

Request for Quote.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

WindowsService1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 987KB - Virtual size: 986KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ