Static task
static1
Behavioral task
behavioral1
Sample
Quotation.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Quotation.exe
Resource
win10v2004-20220414-en
General
-
Target
f1deaf13217f6e0b728e9995a07db0f8a1ee3b83e606ed806d641b9c7bfd1875
-
Size
413KB
-
MD5
d07cb3294eceb2645df557980c983afd
-
SHA1
d9433922d3d8eeea67d027f04aede8d21d35c03b
-
SHA256
f1deaf13217f6e0b728e9995a07db0f8a1ee3b83e606ed806d641b9c7bfd1875
-
SHA512
e0a05d9672d30fbeaa04ebae07588173364bf169024071f27a12a6b8f876dd4a81eaae3b84e266d669d6a119222d5bfb5fe59bbd273f2cc06b408e0877d88ac2
-
SSDEEP
6144:2+eBmykBLHbreotrnNWsn1Z+d8lszpQLrHUic+xokHTrOee85wQbyCr8:2+eQd9GyEs1Zq7pgrUic+xJTrF7S
Malware Config
Signatures
Files
-
f1deaf13217f6e0b728e9995a07db0f8a1ee3b83e606ed806d641b9c7bfd1875.zip
-
Quotation.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 516KB - Virtual size: 515KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ