Static task
static1
Behavioral task
behavioral1
Sample
QUOTATIO.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
QUOTATIO.exe
Resource
win10v2004-20230220-en
General
-
Target
Quotation.img
-
Size
2.5MB
-
MD5
a154b7422f47a5e4353a7be627e22617
-
SHA1
5ad28eb3c35a4eed170974cdc1b16654cff74087
-
SHA256
5d61e25c064f0707948ef110d254508ce0d45218f7b25dab79439866e3ba3e5d
-
SHA512
959814eb8aa80f96567c3d0571fcf5d8270d151f865f3be913b6d50a0528938fcdb5a78e97bd8d0a43728da931cafc8243840d92b3a40726365c9d142f1c55a3
-
SSDEEP
24576:AopfWyN8o8lcdQTNCMRI2+aVi2rBZZof36nnjqKoe:P/SBRRMEICjqKoe
Malware Config
Signatures
Files
-
Quotation.img.iso
-
QUOTATIO.EXE.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ