Static task
static1
Behavioral task
behavioral1
Sample
Quotation-099847664.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Quotation-099847664.exe
Resource
win10v2004-20230221-en
General
-
Target
Quotation-099847664.exe
-
Size
609KB
-
MD5
73cdf6d4b27c70e137e6ef2e146e4758
-
SHA1
e7673f5de0b3cc9d8eae0558f6bf26fd38c08bb1
-
SHA256
d2de362d6ccc7d4009ab97039f678c618e7ea8a30c856945b26b47cc289f8207
-
SHA512
b4e795c851fbed8aa0b9b3a77cc64d3c6921438d1b06065e16688e4654f0968eb9edf675ef98769c7894263e9a49a0d515b8025190e7eee922c7c37ff3fe9250
-
SSDEEP
12288:ABZytQs2AY2VOEshl7Fi7MRUJQOhw1/g3YwkEY5UI:cZyAAY2VOEyAdJQl6shUI
Malware Config
Signatures
Files
-
Quotation-099847664.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 509KB - Virtual size: 509KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ