Quotation_1[.]7z | Triage

Sharing

General

Target

Quotation_1.7z
Size

716KB
MD5

aa6e1e31a7a7bd7116086533c28dc560
SHA1

bad945997b6a95f9db908ab3656c6aed33549117
SHA256

bf1360fa5acf56b0ca70cf9fecce1e62affe486394332fc4769cc68365b046c6
SHA512

e9394a7db1f8de50da769cbe507b67fabb9d09d320448f181be832a3d67581ac2a1c5a353b4fe091b924e3baf57ef7a53e4487a906ee53514064ec9f8bd4a023
SSDEEP

12288:zUqaB90M6jI5wPO/8QGjVb3mZSW2sZz7HpQteHfiKABIphCorHY1oYXx0t7WHWQ:zUqaBRwvOUvE8MVGMHfJpz4la9WZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quotation.scr

Files

Quotation_1.7z
.rar
Quotation.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

OPfx.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 891KB - Virtual size: 890KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ