Our New Quotation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Our New Quotation.exe
Size

640KB
MD5

eef1daccc9464b02eeeb35961933a273
SHA1

223f6dd7601d3fbf3e1f1bba05c12bd220292c35
SHA256

a494db0ac3044848e328e4df3cda6dfd698f5389376623cf9936cfc7ce5a31ad
SHA512

c8365873d489dd664e3ab120dc6730f0d3c37b4fe21a95acb1f08e1f8ebc0d5859a17622002f05c45e4c90bda56194eca308f5fb240623dbcdde3dad5b32c111
SSDEEP

12288:A2iNSHpSjUutAhPn9WpeLtpn5KfMKgLDj7Bt0saGLeeQU7:A1YHgUhPnUOtp/KMDjX0saGLeeZ

Score

1^/10

Malware Config

Signatures

Files

Our New Quotation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 574KB - Virtual size: 573KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ