QUOTATION[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION.exe
Size

626KB
MD5

4f4a178f7063cd9c057eeb80bdf39742
SHA1

ea4e688399ba104ca297863eeabd825e061088d1
SHA256

e33b0f4ba7b4fdf2db2287038d614e269eb88959acd1c6937882ad6a977d6e5b
SHA512

839644a5c5d2bd0b583948ff01a75a4b69df86c3c40e647064e675d560264b083735af28a591a7840f4794c8378b63307256bed25cc05ae9e86ccc645ad450ac
SSDEEP

12288:aOnbqjcKwhmjzyYJEPnI8FcDQmfwK6t/ZxK2BnblKrQ5og4bHXbcYUYJ/:aJyQjzvEPhOfv6tTBblKrFbDtUs/

Score

1^/10

Malware Config

Signatures

Files

QUOTATION.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 609KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ