Static task
static1
Behavioral task
behavioral1
Sample
Quotation.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Quotation.exe
Resource
win10v2004-20220414-en
General
-
Target
da50414898c1f3e0695f76d0a2cacf3f115be131f14bb7116166a18e0e72a3a1
-
Size
514KB
-
MD5
5b5380f4d2705cf100308ca31d372a1c
-
SHA1
893ef07dc294ec775e923ffbf85d4b86b94ed293
-
SHA256
da50414898c1f3e0695f76d0a2cacf3f115be131f14bb7116166a18e0e72a3a1
-
SHA512
1f93326be6026fc8d850ed062369401ba33e44e6b137366084ad8809f6a41141a2a2e7690a887d74d47dfb98b7d183136fafffe15b37a274f96d01bb4d8b2bac
-
SSDEEP
12288:1DiZ9P/pixp/SJrf4fpKsaXX/WYUvKaxKsU42wZiZ:SXpI/qopKhXeYUCpshFZiZ
Malware Config
Signatures
Files
-
da50414898c1f3e0695f76d0a2cacf3f115be131f14bb7116166a18e0e72a3a1.zip
-
Quotation.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ