Request for Quotation[.]jar

General

Target
Request for Quotation.jar
Size 905KB
Sample240809-js4fhsyapk
SHA256 6afa6e45dd17f3db5a8d4e3856f735844a6607ed805fef058e207b1bdc5c19f7
MD5 0ae5021742ffd24c70aa90999cc0a8ce
SHA1 fe008ebf0d4740849e4a9e746e54a66ddd442c29
SHA512 e4afadb374ddbcf69df3bbc296b54f76692e32eacb66820506196adc608cae2fe0af182ccb9c6bc4d885ecc4fa776eca87e41c2450a805b18e475cc829b508e9
SSDEEP 24576:OsnL1AOSod4Beq8szA+cPcad/QeBh7Jm+MZKXVVlTU3:OsL1AxXzGEU/QO7Jm+MZSVlTe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Request for Quotation.exe

File Explorer

Request for Quotation.jar

.zip 905KB
Request for Quotation.exe

.exe 942KB

Request for Quotation.jar

SHA256 6afa6e45dd17f3db5a8d4e3856f735844a6607ed805fef058e207b1bdc5c19f7
MD5 0ae5021742ffd24c70aa90999cc0a8ce
SHA1 fe008ebf0d4740849e4a9e746e54a66ddd442c29
SHA512 e4afadb374ddbcf69df3bbc296b54f76692e32eacb66820506196adc608cae2fe0af182ccb9c6bc4d885ecc4fa776eca87e41c2450a805b18e475cc829b508e9
SSDEEP 24576:OsnL1AOSod4Beq8szA+cPcad/QeBh7Jm+MZKXVVlTU3:OsL1AxXzGEU/QO7Jm+MZSVlTe
MD5 SHA1 SHA512 SSDEEP

Request for Quotation.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 de99d33baf08708519ab2d9dc15635280482b2b21e52653b8786a6eb34c2f262
MD5 81f320c7d5f344ae0ddd2b05c69efb78
SHA1 dcfae138ee23d9cea53a052cfe3c42e87c1873e5
SHA512 cb94f64fd7979917ba1d32a3966e22e9afce0766f58cf15e23a7f1a00d6b2f7cfd1e9b07edcd4c76e7471d89690d142e1ddaa23ea09d95b0f9eb17517d9189e7
SSDEEP 24576:BYeOKhefMa86dA+CPcwh/6s7TNNuS6UEtvqsX+ES:2trdsEE/6mNNuS6UEtvHO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

969438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wzWJ.pdb

Request for Quotation.jar

Request for Quotation.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Request for Quotation.jar

Request for Quotation.exe

mscoree

dotnet