Quotation Inquiry[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quotation Inquiry.exe
Size

900KB
MD5

d1fb1bd908b3b882b47d78fe17b02236
SHA1

81085e18c696929d70ebc689e39428790296c37f
SHA256

578aa55f121e6661b383b90b3a8569b10d3578b8d09a0a29b029bd40f034a441
SHA512

ac117891d9e45f2999a63b7eb1c81cedfa427adc0f88f907260906d7afde0dd76a87eff6abfd305da5f5256707753e1dcfd5d3ded9a8f729dd42025330df3305
SSDEEP

24576:dMRYTynuUNAuQxJ23mavbLYM/ZY6klfIjNWYCRyvBGueD:4m2bUMolfIjCRyAue

Score

1^/10

Malware Config

Signatures

Files

Quotation Inquiry.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 892KB - Virtual size: 892KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ