QUOTATION-648737[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION-648737.exe
Size

448KB
MD5

e9ee311d4c733b1b5bf3c1f131f9633f
SHA1

8ec673a6892d622f5bbba2682447b3307de5f470
SHA256

d4664d3f3b5f805aee687bda02c96a08aad9fea291686d272e8853a004ee205c
SHA512

0fd8adf152bf43906535aa9ecbd03b7cea469cd14b70adab30c2a7bb4dcee3c5f4a848691ae6fbd983febc3be6d13489b4f0feb7635b524c46a6fbb7753a5d69
SSDEEP

12288:WXNtcpBhlWgPfyVfGyNCM3kTY5R+FehwOgrLc:ccpPlWcaVfGM0TY2tO7

Score

N/A

Malware Config

Signatures

Files

QUOTATION-648737.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ