Quotation-092834[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quotation-092834.exe
Size

1.0MB
MD5

956338c4bae384859379a6c047c52aee
SHA1

7f94655807dfc45eab33294f59479be325085802
SHA256

bfed5d307bbc8fab5ea5d9bdf79a62d5c6b5c6e907a3a291591c00a5f48d82f2
SHA512

30bbe75fba4e76008d410620265987c4243aa021d4fd3ffef4a2e2d6cb0f01f5da4409823b94146957c075c63e2e4473f58dcdb496be12eb60b69dab3e469a19
SSDEEP

12288:sQ3PlYuO1222PwXPzVWaqhP3C+FyFxHhZ89VPbNEdF8gKJSaK9fVu/8pt9r/lWvp:sQ3NYV2QzVZqIRWXGIgXawRptBlqu

Score

1^/10

Malware Config

Signatures

Files

Quotation-092834.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 941KB - Virtual size: 940KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ