14112024_0200_13112024_QUOTATION-- #46789RFQ_SUPLM_NOV24_SALEH_CONSTRUCTIONS_LLC_PDF[.]7z

General

Target
14112024_0200_13112024_QUOTATION-- #46789RFQ_SUPLM_NOV24_SALEH_CONSTRUCTIONS_LLC_PDF.7z
Size 784KB
Sample241114-ce1ddashlf
SHA256 aae02ab2461de2d26dcc070a13c6fa1e32b843d5ea8de7bf7affa260a0e2a570
MD5 432696e5eeae671eeec137155669d1ba
SHA1 13817827efc54aed9bdd22d440764bc704b9a1b7
SHA512 42953f8ed4559a4e051a3fe8c04fdc4d04a29ec85c0b1ba84152baebb026fb69b52761769b8682b7b93e1b0a240234a5ac8484e7973e9de1f5a345d546b66725
SSDEEP 12288:/w78Xfr17IaEsDM7oAfyzxjEyq5RbrkfJVL6/HNnxDsWwU1l+JH81Ir0JUIVUL20:/w+frJIth8qyRkRHkxV2FN1lMbwnWi5i
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATION #46789RFQ_SUPLM_NOV24_SALEH_CONSTRUCTIONS_LLC_PDF.exe

File Explorer

14112024_0200_13112024_QUOTATION-- #46789RFQ_SUPLM_NOV24_SALEH_CONSTRUCTIONS_LLC_PDF.7z

.zip 784KB
QUOTATION #46789RFQ_SUPLM_NOV24_SALEH_CONSTRUCTIONS_LLC_PDF.exe

.exe 1.3MB

14112024_0200_13112024_QUOTATION-- #46789RFQ_SUPLM_NOV24_SALEH_CONSTRUCTIONS_LLC_PDF.7z

SHA256 aae02ab2461de2d26dcc070a13c6fa1e32b843d5ea8de7bf7affa260a0e2a570
MD5 432696e5eeae671eeec137155669d1ba
SHA1 13817827efc54aed9bdd22d440764bc704b9a1b7
SHA512 42953f8ed4559a4e051a3fe8c04fdc4d04a29ec85c0b1ba84152baebb026fb69b52761769b8682b7b93e1b0a240234a5ac8484e7973e9de1f5a345d546b66725
SSDEEP 12288:/w78Xfr17IaEsDM7oAfyzxjEyq5RbrkfJVL6/HNnxDsWwU1l+JH81Ir0JUIVUL20:/w+frJIth8qyRkRHkxV2FN1lMbwnWi5i
MD5 SHA1 SHA512 SSDEEP

Password

infected

QUOTATION #46789RFQ_SUPLM_NOV24_SALEH_CONSTRUCTIONS_LLC_PDF.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 39fe045b17ab2fcdb512758a431845409c29ca9341090ac81878658423c39129
MD5 5c44a72a49fe4fbc94f1c1aa8cbf0ab6
SHA1 d0d0903f73b4aa11ee580fb6fd8d80775e6e88de
SHA512 d92503e2ebbaa4e8728098cf6d0079de711a4f92663ad9db8583d848721818e4ecf3790a65253a0cd850c23eed8a46f98049a11f77b9f106344e501d124fbb97
SSDEEP 24576:ctcKivRdWnSyEHyfE75BP/+mgWdm/bTLLK6:LKmXWSy6r2mgxv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

1225582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

14112024_0200_13112024_QUOTATION-- #46789RFQ_SUPLM_NOV24_SALEH_CONSTRUCTIONS_LLC_PDF.7z

QUOTATION #46789RFQ_SUPLM_NOV24_SALEH_CONSTRUCTIONS_LLC_PDF.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

14112024_0200_13112024_QUOTATION-- #46789RFQ_SUPLM_NOV24_SALEH_CONSTRUCTIONS_LLC_PDF.7z

QUOTATION #46789RFQ_SUPLM_NOV24_SALEH_CONSTRUCTIONS_LLC_PDF.exe

mscoree

dotnet