f0faf23cab3010aa7bb768fd2bc8c10b134ac1186b4cdd117b2ae0c4938f2fc6 | Triage

Sharing

General

Target

f0faf23cab3010aa7bb768fd2bc8c10b134ac1186b4cdd117b2ae0c4938f2fc6
Size

646KB
MD5

05c0d616e1ef814e260223303889c1df
SHA1

081b1c0ae796471b921cb95ef604ff9838934c96
SHA256

f0faf23cab3010aa7bb768fd2bc8c10b134ac1186b4cdd117b2ae0c4938f2fc6
SHA512

3c8d0a132967c217c456dffd1d3a96dad7423879fd9287f4c15bdd39818e6c6dc45f44de21d4a00a8152a5385b420ea2f4b2a6f633afeec5b1a7b94360a52c59
SSDEEP

12288:T7EucaNZYwEvwxJ5zruZO+95T71x4fwH2Rldb5YXbRaCFgrdZdR+GYH:T7Eucav64X5zQO+/1+fwHm+X3FgrJ8GU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTE-4K798387.exe

Files

f0faf23cab3010aa7bb768fd2bc8c10b134ac1186b4cdd117b2ae0c4938f2fc6
.rar
QUOTE-4K798387.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 788KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ