Static task
static1
Behavioral task
behavioral1
Sample
Quotation.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Quotation.exe
Resource
win10v2004-20220812-en
General
-
Target
Quotation.exe
-
Size
680KB
-
MD5
27b026195e28ef7fb67a07867592dfbe
-
SHA1
482ed4d73b99dddcb3be15f43af92f9397d0138a
-
SHA256
66929c9159ec519f7cd2c78adfc582c9d052c836114844435e7eaf3536d89169
-
SHA512
1ca1ab28639fca5964dd6042ba245eeb02d738b54d3045b6601d1cfc82b13e0cf43eb6f8e1f849e3f1c11e5600530a1bb33cac99f2f5ca58a696fa95cdb03da7
-
SSDEEP
12288:R8JUsSqcPTvYeuVGXaqA5kRfOUcLEsGHP5r+1wmAqIZlS9MpT:R89whueaqKe5s00wcelSWh
Malware Config
Signatures
Files
-
Quotation.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ