QUOTE-4K748388-A-CCC2[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTE-4K748388-A-CCC2.rar
Size

572KB
MD5

8abd39508e6fd8eb5407c8a1c08a2bd1
SHA1

b4385990b3cbc89275128a8b4bea3676345193ca
SHA256

0e451d78750aa03bea42131b84d96e7865beee061b37cb95dca66ae8b1386cdc
SHA512

e82258f95b0ac66cbb07796d2f9ff96aee87594e56e2a091c0ec03eadeedd4fbc819c8759a18d5cafc34351c1f96111ce7e745e285158581ab9f21392683e2f1
SSDEEP

12288:Rn0RvyLGeMAjnH5n1Dazuk9MVos994REVoMszAc4t2OTO:R0FeMoH5n1KrI4REV8A9t2wO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTE-4K748388-A-CCC2.exe

Files

QUOTE-4K748388-A-CCC2.rar
.rar
QUOTE-4K748388-A-CCC2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Bzel.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 583KB - Virtual size: 583KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ