25012025_0154_23012025_Quote[.]gz | Triage

Sharing

General

Target

25012025_0154_23012025_Quote.gz
Size

890KB
MD5

4893e38bc770f3ec5cb87e675a507c57
SHA1

a0f92c12ba5154310f57f5c3d8b51ce044642030
SHA256

be92ea3d3f4d480c7dda68d421bf4f718b7411c14da94f1077d9debc40f29b95
SHA512

ac0e78554f9e4d4b3b74cff85edb498db8500653215f6199fe197ae0f00f88ed353976867ac8cf5706fcd67506aa71ae7620ff1dd2d9c1389bb3fab897566d1d
SSDEEP

24576:m1oxGQHD38tZDhfgV7eTZRzwU8crkmwip2MudW:Co5jgZDhfykZRzhvrH6M4W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quotation.exe

Files

25012025_0154_23012025_Quote.gz
.rar
Quotation.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 985KB - Virtual size: 985KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ