Quotation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quotation.exe
Size

928KB
MD5

7fb540673f9218c73baf48589f733edb
SHA1

4352b6b9747d96b48bbf37974eab90de5635e7ce
SHA256

596be1358f2d374387f1507a29e19ff42655c020e64b48274049d99ba0edeed8
SHA512

3964ce45cf0193cef2783c9f1d544796358c7d2496bd602dab19ea85b17b661175ce2d49c95546627461f69c858f55685c00223d73c03e13d3a8af6680badd56
SSDEEP

12288:Ra/5u62iNV80Fa41nvM7wPGAS2tb6f2zPE7c43QPrmVh0PFAV+0jfp1Y:Ra/5u61Q0gmkkeck2LBYh5AMp1Y

Score

1^/10

Malware Config

Signatures

Files

Quotation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 855KB - Virtual size: 854KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ