Static task
static1
Behavioral task
behavioral1
Sample
Quotation.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Quotation.exe
Resource
win10v2004-20220414-en
General
-
Target
45d5cbb777a70025d8f32cb8de30bc0fd9bd81391bcd2e6b825ef1b18091b812
-
Size
381KB
-
MD5
e599f028a60cd463ccf230e60f756d92
-
SHA1
dfdeea4ef92e72a73826738e9fb3a9e9ef869391
-
SHA256
45d5cbb777a70025d8f32cb8de30bc0fd9bd81391bcd2e6b825ef1b18091b812
-
SHA512
6b5fe669dde214fcf6da3d904cdbcb49458bea3f494076f05ae21bcf16b5adef2740beb31b5cde041ea8ba5ab526055502bce8b00b77dfd82fbca5447e67e5b5
-
SSDEEP
6144:knFolyW5SzPGONFphZxkl3KqLLhzfAcW8ys9LnGxO5fzGkoNi9XcKzP6yym:kay0SzPGO3phLkNLLPBys1GxO4RNCsu3
Malware Config
Signatures
Files
-
45d5cbb777a70025d8f32cb8de30bc0fd9bd81391bcd2e6b825ef1b18091b812.rar
-
Quotation.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 545KB - Virtual size: 544KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ