quotation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

quotation.exe
Size

891KB
MD5

a615ff6ffc21a5ec3891c289d4f0ad06
SHA1

c75e002876d9c16ac317b9c20c0fb3125f6c6dac
SHA256

bb31f67ff9a8985a41245a540c463ddf3b997827c5f76993b766c908fac37ba0
SHA512

6ed56e919bef5175d9ef359bfb8de139c8e8b0c465ac804831241b50cd5af6938f1e584cf0237acf7d3ba9ec89b06422d6f3e25b8da0407a81b507cf40222013
SSDEEP

12288:JCRjGwjs/sNXpgfavgxmEsu0AH0vOT7bRnd3efOm4IFrRa5JMu:UDNydxNlBpT7ZxeXJR+

Score

N/A

Malware Config

Signatures

Files

quotation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 889KB - Virtual size: 888KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ