quotation list[.]exe | Triage

Sharing

General

Target

quotation list.exe
Size

788KB
MD5

e783f26eb96f8f6741edd280010b2be9
SHA1

bc256f81278d3e33147806cccd2cb26691409b45
SHA256

1c503c1576dbcbcbaf2ebc8ac578e6d694ffcaf84f88c2ea6a49e4ffcb5861b4
SHA512

5da804a38a0ada122394648d0255cd5facfbd8a407f97df9d3d00a1f328757738705b1575aada31ab5debd4c6d21bacb6ddbd18b573b36f183914d72b3abffd7
SSDEEP

24576:Y1iewlqB6pAkg5Wx4nY480LPz34D5U+UeYnxglR1ZJob5YQ:YQe2q8pAZgxeYLM4DmneYxgj/v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
quotation list.exe

Files

quotation list.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 785KB - Virtual size: 785KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ