9d0e6b3873885ab21ca3953c6ee933f68a5807e5e99f331ad6828afa57b9a838 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9d0e6b3873885ab21ca3953c6ee933f68a5807e5e99f331ad6828afa57b9a838
Size

655KB
MD5

5aa6cca578b4620c00bf5ad8ce4bef8a
SHA1

78e61cecf291dd2af08122bcf8e6eff213f7096a
SHA256

9d0e6b3873885ab21ca3953c6ee933f68a5807e5e99f331ad6828afa57b9a838
SHA512

d46641d91e6ba015f271c83298c2d458a75ad4bde139ab2eeec61dacba29b7563be048bb440bb93fd2e7ceebcf181e16da651f04abc80cae3e5512e0e413fb2b
SSDEEP

12288:DWkuj7ttg+9M/KSfM3L+nUEZ2DZe55VRiydt/KZr+KhOaHiabgB305MBmVDO:DKPDa/KSUb+nUXZ2SZKK9HiabyEjVDO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New Steel Quotation.exe

Files

9d0e6b3873885ab21ca3953c6ee933f68a5807e5e99f331ad6828afa57b9a838
.zip
New Steel Quotation.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

LgwK.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 665KB - Virtual size: 665KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ