2a28690f30aacafe7ca48d2cbff27b082aaaee624df3ad7825dcfdc15a96c589 | Triage

Sharing

General

Target

2a28690f30aacafe7ca48d2cbff27b082aaaee624df3ad7825dcfdc15a96c589
Size

5KB
MD5

12ffcc184336f536356793394caebaf2
SHA1

ed44f4d7a786cbda094af3f5b30d8882e51b7b20
SHA256

2a28690f30aacafe7ca48d2cbff27b082aaaee624df3ad7825dcfdc15a96c589
SHA512

eb5aca31fd3ae9fbd406a509b46dc1a6eb64371df75960b31c923265ac7b6e7fa8a2e3d8851080817a00dd2111186881d1bdfb53833a02b3e51e88f4dd4edaf6
SSDEEP

96:oU51wGMc6FmskJsfCw1BTVJhEpt5FPXv9glImmn0HEb/T99Soq:oUkGB+OWaUBThmftv98ImBEX7zq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WG Quotation 11157061 DE-TR.exe

Files

2a28690f30aacafe7ca48d2cbff27b082aaaee624df3ad7825dcfdc15a96c589
.rar
WG Quotation 11157061 DE-TR.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ