QUOTATION[.]7Z | Triage

Sharing

General

Target

QUOTATION.7Z
Size

545KB
MD5

708be7f03edd080b3413a059d5921351
SHA1

750cbc177094d4a318c0bee301b752b54a0825bd
SHA256

762bc2a55e45ce9545e3463608736fcdb4ced03d3c56ca23467f1ff00d1d54a1
SHA512

26b148951f0d210432073c43727ed33ab5a3dd6639ee1d9091f621a507b9f38d38a79cf58d67799775d8c28fd2d7542b4f7be5b03f338cb0962676c8d8447348
SSDEEP

6144:iSydphHfO0/tVbcmmcDyjBJztCndNxlOFyQJVlcg3jPXRvoSo+Sl6ktjYsDl8Ck8:kdDHdcm9yzt6NxEFBLzPSh+7W8K4S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATION.exe

Files

QUOTATION.7Z
.rar
QUOTATION.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

irYz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 594KB - Virtual size: 594KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ