QUOTATION[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION.exe
Size

481KB
MD5

ae56bc534888c582bcc174377cc3a527
SHA1

9b8faa3f25e2d205b0384c300aa2c8f99cb02507
SHA256

376c999716183d5e6971b9ed0ac92442bb670b3e362b1dad2ff366a34e052002
SHA512

d7ce06e2e894574143d917b66b8f4d17fe65d5de91a963ce7aa6bb2b99a2e377412244d3d410d7c78167c83942fb08a5cd9751ba5225dd0a59c065e79cad75be
SSDEEP

12288:Fh7Wg1FnvgXI9XaSS1jNR/MX9GMvT5cKOXe7W3EJEyL:DFvgXT51jQNlT5cV8W3uEyL

Score

N/A

Malware Config

Signatures

Files

QUOTATION.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 477KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ