Quotation[.]eml[.]tar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quotation.eml.tar
Size

439KB
MD5

a66d457587c1786ae93c8f3b18a0fb27
SHA1

06f53e8bdf565d7632f519478487577c05678292
SHA256

a5920b76d6762f8dc62714621a70eee49d0eff1fabbb90933de82ffb70644c83
SHA512

ffcd6592ec17568b734f2b406d46e07aa4e710b4083522aa1d55697e275def210ce7d52163ebcd9f1144eb95e56a5c9c346aac7e4896704b349afea02acde3e0
SSDEEP

6144:8VlKtQNzZUupRa92xukmUFKQlypg+lNhgXZfZCkH6BxNlYbPeMvqgmY6uwFRm+:IlKOEkbVQQlC6xH6Vl7EZ6uI

Score

N/A

Malware Config

Signatures

Files

Quotation.eml.tar
.rar
Quotation.img
.iso
Quotation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 583KB - Virtual size: 582KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ