Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION.exe
Resource
win7-20220414-en
General
-
Target
87cfe92ace5f79ca092a7e9b60a0cdcc4776f8583bf2ff70a8461246d6a71687
-
Size
641KB
-
MD5
df50bf84acc2a636df39f42730e2a6bf
-
SHA1
10053436616c0a6fd3853f0fe8d3d2ed089da011
-
SHA256
87cfe92ace5f79ca092a7e9b60a0cdcc4776f8583bf2ff70a8461246d6a71687
-
SHA512
d2b746ee1192bbe48af66651680a295494f7083e6e2c9db2ca0eae781b7979a526b632ffa69f3419fb1873faf7a07904eb0f99f895bcc8ca75dd7ac38b863d5a
-
SSDEEP
12288:fNnTTKBq+6bnCKMmkRHlHZ2U2OeuDM1Mo61PWGKgNzKQ:fpy36bnCKM1RFsUvJez2ufQzKQ
Malware Config
Signatures
Files
-
87cfe92ace5f79ca092a7e9b60a0cdcc4776f8583bf2ff70a8461246d6a71687.rar
-
QUOTATION.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ