EQUIPMENT QUOTATION#033986[.]exe | Triage

Sharing

General

Target

EQUIPMENT QUOTATION#033986.exe
Size

1.0MB
MD5

c350c3a502bf95c724acd864aa8d48de
SHA1

3c544230bdb4d1656818d770b682f2b8cc224a16
SHA256

a91cf2a4699e93a3101762f542bf47b51d8ac09f8e78eaa2222c36807e0c0e72
SHA512

e74017f52210fe47d9627f9021e1ad432ef944bdbe8a1e17085c249cabb7f02ba5c63720041995677ebdefb502a5953ea09b8ce71ef3cacd5cf6a945ce157e97
SSDEEP

12288:tzSggsidljMurxgrb81Qv2RA5OMpEoLbqvADoZRGlGcnB7iFTr+8+5rGurubCj3t:tzK3v1QmATpEybiQ9B7iRro/6Cj3X3N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EQUIPMENT QUOTATION#033986.exe

Files

EQUIPMENT QUOTATION#033986.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

UWGi.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 861KB - Virtual size: 861KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ