Static task
static1
Behavioral task
behavioral1
Sample
Quotation.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Quotation.exe
Resource
win10v2004-20220414-en
General
-
Target
cc00689f0696fe00669c8772958d42c1bd989a457bbee7ca3a6b117413aaf3ed
-
Size
724KB
-
MD5
53e28a01b21fb91e3787d22d4e0125f3
-
SHA1
8f2d8cb60e5e63a399f3f14d02ea4366a1af0a7d
-
SHA256
cc00689f0696fe00669c8772958d42c1bd989a457bbee7ca3a6b117413aaf3ed
-
SHA512
d99ffb660a8fea69b9a536988e2bafe1f10cfd07bd6752d85f5c982a36ae94aa98e94f6e2ad5fcd552d741e0d405f8a53ef4ad7dfde47e1bb5fbdb7e610be2e7
-
SSDEEP
12288:3cSP+gMcfnKd6VbrL6BIZZZk9W+vtD+WsHI4zTgmMh+hxWy:z+HMw6V/OBvZ+WQNzsmyNy
Malware Config
Signatures
Files
-
cc00689f0696fe00669c8772958d42c1bd989a457bbee7ca3a6b117413aaf3ed.zip
-
Quotation.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 758KB - Virtual size: 758KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ