14042025_1515_11042025_Approved quotation[.]rar | Triage

Sharing

General

Target

14042025_1515_11042025_Approved quotation.rar
Size

656KB
MD5

87b39aca5703c4b07473bc34753b6b5c
SHA1

bd403e593279221348bca5e495f6db6608cb0efe
SHA256

c1ffadcdfc3ae9746644fbb9a88d3ccae11b9f6bb435f1dbaa3bfc64ea46b511
SHA512

fb34cbcddf1139d139ed4d34eec0ab705a7b60f9dfd87cf0b357a6105449960b62a460e74910f43555b58062f3cf2ebe378418fdf12b6c3609b8cc65391a2390
SSDEEP

12288:LssxnDpbZagVCRwgRPIzeZ5gWTIq6TZJl8B/1Zb5vpxQV:LssxnJZBVQRPI61OZX8B97vTk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Approved quotation.exe

Files

14042025_1515_11042025_Approved quotation.rar
.rar

Password: infected
Approved quotation.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

zGDw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 698KB - Virtual size: 697KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ