Quotation QAMF 19590[.]img | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quotation QAMF 19590.img
Size

58KB
MD5

e366b7860d8b98322ee7928f1a23cad3
SHA1

096688f7d7fcbed69bc2fb02a4753e67505b0c17
SHA256

8bdd216fc9fb0b6b3ef0e72188c5c41ee6207679ce68cc0b625f8e33a4ae2421
SHA512

e926e41023966de02f286ec9cd712896cc1f5d22d23582a9f1dc27ffb7a172c6ff8cdbfcd916420d2bf06278b1cb49a6be792a5fd5ec18d2d97b97dcb9eef3ea
SSDEEP

192:PmXCEWQfs0lSkGQvhfSaeWC83T/+ULEGMf6Z:PmmQfnpfSaeWCwT/+ULEGW6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quotation QAMF 19590.exe

Files

Quotation QAMF 19590.img
.iso
Quotation QAMF 19590.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ