Quotaion-pdf-[.]exe | Triage

Sharing

General

Target

Quotaion-pdf-.exe
Size

908KB
MD5

784b7d12402a2b9900c3b0228312b5ac
SHA1

d2380976badb2ad8cdd0b0b38aaa22d989a95bc0
SHA256

04a56a61c1ee4f2b5710672cc9d7564086746e99d1e1ea32baf845c5be3758ce
SHA512

934efc840ccd863cf88eac934a03823d385f618bb596195552ddebcc84c42c990bf26130a4af6d7edec5353022bc720ab1b75d9e9f1d7f274db3df9d8fd64a0a
SSDEEP

12288:DrLpNaPn0YPX/N94+OCreCEl1aa8UJlUTcRssz573VP+cZegdgmCn7ravxhXaFXE:CP0tZCEln/JNlZdgN7rE0X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quotaion-pdf-.exe

Files

Quotaion-pdf-.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 892KB - Virtual size: 890KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ