QUOTATION#231984[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION#231984.exe
Size

1.7MB
MD5

319307604d727fd2caeac236cb968b27
SHA1

c0723f45066f65812092eb768f994bbea5683085
SHA256

78d2c30f07aacb40da92c21af1dc660a690074ee35da707c81d06d146c631a28
SHA512

d2e80e344da7129079018f853e70dc26ac5080e79c5cd437cd3d5dca8c9c8617a691fcd97bd1def266edde2de22cbfa4cccd6350dbb5ebdec9654a06783b222e
SSDEEP

24576:CFJvj8ZE/OK1yhYcp/2111VD+7AB7L+KgyrrrrPrF0BMnlE6AE6nnjqKoep:C/qE/OEGh4ykODyFBnK6ejqKoep

Score

1^/10

Malware Config

Signatures

Files

QUOTATION#231984.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ