a445cdc9d8d2d40a006315b3505af76b234c69f1081d6bb8dba4c48af312597a | Triage

Sharing

General

Target

a445cdc9d8d2d40a006315b3505af76b234c69f1081d6bb8dba4c48af312597a
Size

311KB
MD5

fa8db3c2ba659337122b991d70f83ebe
SHA1

620eb8a99e7fc7e3bf52175dfd7c9890cc1cafd0
SHA256

a445cdc9d8d2d40a006315b3505af76b234c69f1081d6bb8dba4c48af312597a
SHA512

7d56fea6ac8313f1b7121ace2c9185e0eacd7167e680d684e37e71002871adb301b63d126047e779acb12262f5df08886ef01523fb8c7ab80e3849b475fc6dd5
SSDEEP

6144:fEm/pqFaveZ/1cvKf25JrS4k0e5pS0AAn1M3qFg2iBCSb4ZigUiu6Vll:ccpq7Pg/5Age5AR3qFCNsiiuSll

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Request For Quotation.exe

Files

a445cdc9d8d2d40a006315b3505af76b234c69f1081d6bb8dba4c48af312597a
.rar
Request For Quotation.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 329KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ