Quotation_Dec 2024[.]rar | Triage

Sharing

General

Target

Quotation_Dec 2024.rar
Size

9KB
MD5

a923e4fa092152cefdcb8e9fc5e44184
SHA1

efc1f4847e442ecc711e0b43dda911dd50d6c1aa
SHA256

9f2d144187fc0d57f06eb152310bc2c5b0804f26419e75cb2145437ab46f4a4a
SHA512

033820b066c4432686bdf91a14ededd04d8700294190e2d37680383395ddaf4905b1b14cf4e2be48241ed1e287bfa1d9b4ed16d191e514f08efc8afc98e95d4a
SSDEEP

192:QA1hRb0m3yEoi31u9x9K4nuFl9Oot7PqmDqxi3Q5TRpjetB5XQ:QMIwTsNuFDzt7PrQn+BNQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quotation_Dec 2024.exe

Files

Quotation_Dec 2024.rar
.rar
Quotation_Dec 2024.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\2023CryptsDone\TweakTool\obj\x86\Debug\Ernalin.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ