Quote_2923[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quote_2923.exe
Size

671KB
MD5

6ca60bfa884f24307872a512c8e2bfe9
SHA1

1b88f3613064018eea17a1e8f1423de5069d8e06
SHA256

6cc4f246c1f5909591e0eef75590deb089a32a07eb568e0a5667fb46e1a37a56
SHA512

35597dddb9a85e85e9dcf62c213958879e689d1a900b43176527ffd83448348ccb3e00dc6c221f5436ca2dd02fc595a84183d78133f0ed1a8b57fdcfa02bb6c8
SSDEEP

12288:89Xnc0iXtovSw50O7TQcLPev8RKcDSASwbT9pnEx7iqL:2ielLPev8ZbnnE5H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quote_2923.exe

Files

Quote_2923.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 669KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ