Quotation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quotation.exe
Size

810KB
MD5

937e58e663ea6dd973dfa081d8e0fad1
SHA1

e5e9034d790f729c0a377aa4366a836209f7e45e
SHA256

490dbc697f6a780e942c8caa7d853da4ae29078059081431e7cf6376caae79a0
SHA512

3729fc567993080bfa5277bcdea6232bc957230705b4106ad7e0efc3e43d55cd8e6ece8e6267d864ad954ae6ae97ba8b77414bbb040b285229f690a8dace5f34
SSDEEP

12288:xMufEu8C3s184TSiilcBHNCVtEH2NgAN9qe89vq1pU87rPwNY:ti8wzw/ViWSmDKq1P4N

Score

N/A

Malware Config

Signatures

Files

Quotation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 808KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ