QUOTATION[.]exe | Triage

Sharing

General

Target

QUOTATION.exe
Size

620KB
MD5

0931a1a600a6d5ab0f2e9f262c23e12f
SHA1

9d1809754abbdba54b9173a9ddb25a6db16f4f02
SHA256

60fd8eed49b4f5be9c198624f1c395eedb32849823d4f2be959b26d7173d3f5c
SHA512

beeac52409402885d55c8bf46fd1671058f4424286abcf44f8de45ccd1a40bd840c45bbce81c4061633233e8bada4c446b09c8eb0c28b3602132f461cbc56bc3
SSDEEP

12288:A/5BifkoZtTH9WKK5dDCwua/GC+MTKCCbVQkJcUZbF+PArtBi:0ifkCtTHczn/G3EK1VJJdigE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOTATION.exe

Files

QUOTATION.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 602KB - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ