QUOTATION[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION.exe
Size

1.2MB
MD5

bae56fc80aac995bb0f92255c58d5642
SHA1

512b9d59be97ba70e6f4ed501bd701f6faeb3686
SHA256

b09f4dfae35c0c365132b70b69008caeaa275d0345191a972f24a5c538678d5e
SHA512

3e3c69287facc7a1ed861da9bd204419ed790bb1b8c11fc95fe2855ba0603d3046b924c5796bbcb129935215444195ffc2c4391f1b02ec60b989adc90cee7ed2
SSDEEP

12288:BriqTB7eYopIGCxixvZic8rwYX00JqU1VKb5ek+w1ig3O:hbt8eGAiJuwIrlKbj+w1iIO

Score

N/A

Malware Config

Signatures

Files

QUOTATION.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 959KB - Virtual size: 959KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ