QUOTATION[.]IMG | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION.IMG
Size

1.2MB
MD5

17c7dc612ab439c50db10d2b9c6be386
SHA1

552b4f075c78f09ffb3197616fe17c330250f422
SHA256

7c097aac7fea970ff441027a817d7a03b4556262747bc0567f9c96694bf2532b
SHA512

7e43afc6cbe32768b415daac7c507d9508366d3313dac6841538c43bccb8e9935cc2176d0cd7872eeb5bae9583beacf5de582c7622f254c05b9c8cb506d6b55d
SSDEEP

12288:h/5BifkoZtTH9WKK5dDCwua/GC+MTKCCbVQkJcUZbF+PArtBi:hifkCtTHczn/G3EK1VJJdigE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QUOTATIO.EXE

Files

QUOTATION.IMG
.iso
QUOTATIO.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 602KB - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ