quotation orda[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

quotation orda.exe
Size

1.0MB
MD5

958cfeabb71fa0c661de6139c3225de4
SHA1

81cf6446440ea55e0dcf29e83263378a54dae010
SHA256

9a1d1bef26696bef7c0968da056617ddef463b53f66ccfcb510b52db5e2b8721
SHA512

8f584b0695b4c050155f725e00dff8907d80d6215fd3d278012b4a941f9a95bde4a964757235e12d65f3d1e22921931d48f070e9aeb21b1b5e67f30dd1d0fd76
SSDEEP

12288:LVRq0V6Dk6RBgdDGOSuzqHu2rmaPEQa+Kkt7nBWnPyR3DSBUaJvytX:cRBghGM1+KktrBWKRzSfaZ

Score

1^/10

Malware Config

Signatures

Files

quotation orda.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 956KB - Virtual size: 956KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ