23122024_1517_23122024_Quotation[.]gz

General

Target
23122024_1517_23122024_Quotation.gz
Size 893KB
Sample241223-spdv5asrf1
SHA256 b4d1b79459e02f66fae43fa71b6422be611fc7595306875ad87eddaa0e07ac5c
MD5 3da758f3dd63c65268d64ce6bae7ee05
SHA1 710685e020757f550dbf7fc684545da5fe97a7b7
SHA512 db6d8cb0f368b021905edcdb5d6d199991eebb79ec148f4443a4ff136d7c65c30372974e142986c7c91b37c1da2b8daf25f755e7e1b9ca96a3ba7b9da6f8a0fc
SSDEEP 24576:oejs9tVi+BU7popGKxwl+kEbWPEdo/Or8DRt:oEyOQsophxy+kgU3oARt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quotation.exe

File Explorer

23122024_1517_23122024_Quotation.gz

.rar 893KB
Quotation.exe

.exe 1.0MB

23122024_1517_23122024_Quotation.gz

SHA256 b4d1b79459e02f66fae43fa71b6422be611fc7595306875ad87eddaa0e07ac5c
MD5 3da758f3dd63c65268d64ce6bae7ee05
SHA1 710685e020757f550dbf7fc684545da5fe97a7b7
SHA512 db6d8cb0f368b021905edcdb5d6d199991eebb79ec148f4443a4ff136d7c65c30372974e142986c7c91b37c1da2b8daf25f755e7e1b9ca96a3ba7b9da6f8a0fc
SSDEEP 24576:oejs9tVi+BU7popGKxwl+kEbWPEdo/Or8DRt:oEyOQsophxy+kgU3oARt
MD5 SHA1 SHA512 SSDEEP

Password

infected

Quotation.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 905eb3c354f4f1210442b25983482a2612d6354df9c3d26beb9a0bdaf1e9ac04
MD5 67b86e9595c2d0d2f44454ec239fda56
SHA1 1a44600a7b4e010174d99c152dc20fef1d84061a
SHA512 73fb542c826f8e75683e7944f0f616d2317d17c5cc153610e7d2107c6da7458da00c89e797aa4f59c92d92095dcf884ef9474cf7ac5dcc4bf526aa8389486604
SSDEEP 24576:BHAXaxESQklIlQcZrVs+3FvrVOuHvKYKrVFmdGp7N1/TBt:BgAlFUrv3FjwuPKYaGK/t
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

1079814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

23122024_1517_23122024_Quotation.gz

Quotation.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

23122024_1517_23122024_Quotation.gz

Quotation.exe

mscoree

dotnet