Quotation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quotation.exe
Size

834KB
MD5

24b450aa2cd22c1fb4cf44c8d6ab1ae7
SHA1

1f90b855350a2f283bce9478c0cb4d84937b56a3
SHA256

4bc1013fdcdc2ad656979586944cc2a424abaab7e75c34ad46c5981b7b851f5d
SHA512

9213d09c2cc53d99d37d78262f41f424450bb804adaa30a3ea62d5bdf46cf0bcbd179b0bfe6d01214bae25c2bda3b3569e2c4e25c4a2cc7a0f896662bdaba1ac
SSDEEP

24576:Dfr1h/qaU2g2mZXqEFLWaWw06DGaHMtY:zryLr9qERWwJDGQ

Score

N/A

Malware Config

Signatures

Files

Quotation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 831KB - Virtual size: 831KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ