Quotation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quotation.exe
Size

1009KB
MD5

3c4224108d0dc0afc3b19e40c6e521b4
SHA1

8ed60827a591be07f9d528fd18bd526151dabdcd
SHA256

a4d14d5e1d1899c6f86455561db1b23bc9dd456f3fc0e9a01ed67b204ebecf9e
SHA512

e4cac7c8377b132784107342daad1f877b2a1c66266a3c4c32596b4bb4ec8c88abf8a56a0cb445f5b7f81f93ee87b099c9323558c38125f29672eb73327e9baa
SSDEEP

24576:B8HfC3miHIReMj10Z20QBf7yb9tsDA1P22:B8fCXIGZpWZDA522

Score

N/A

Malware Config

Signatures

Files

Quotation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1001KB - Virtual size: 1001KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ