1c5504c4654c83bc512b90f21ea3df73d904949208ee2f3fae27c786a4ac1be1 | Triage

Sharing

General

Target

1c5504c4654c83bc512b90f21ea3df73d904949208ee2f3fae27c786a4ac1be1
Size

738KB
MD5

4db41d57c2937c7ba85cbb8322ae74c3
SHA1

78ade6a8530772875f46d482fc868d20701f1149
SHA256

1c5504c4654c83bc512b90f21ea3df73d904949208ee2f3fae27c786a4ac1be1
SHA512

6dd4bd8913c6155bdfbc5f3780aa2566888a80d4e8a0995e2ae71e7c9e937917586a8cbc0989d206aca26422fe4407566591930553fc3fa55e452d0e2a5f0407
SSDEEP

12288:zWawkzG7Zow1Gqfu8yqcrkcjiKvKi4XITPr4YtGOxhrnBGVUUOLnpek+nj/ZK1KQ:zp01Gq28KrHi2XD7VXnsinpx+nkwQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MACHINE QUOTATION.exe

Files

1c5504c4654c83bc512b90f21ea3df73d904949208ee2f3fae27c786a4ac1be1
.rar
MACHINE QUOTATION.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

iQmy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 715KB - Virtual size: 715KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ