QUOTATION NO Q-24570R1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION NO Q-24570R1.exe
Size

612KB
MD5

0e2c087237d7f6a7a0fd9e16f8323e5c
SHA1

16fb1a0c3f07a6d5d693a0d8bfcd5fd6f284bf65
SHA256

13de51cacde4de6b1046e4e5c97526aafc09844335e21c4222d9bad5c9822e8c
SHA512

39f2c453dd9e067ccd0851d09c6409dccfdc196f48edf9a48c4d0f87e8dbfcd4d1bacf1a125c43379cd6ef96126505c3c1b86572535886dd7e6fe759dec8fda4
SSDEEP

12288:22iNsXDl+C0T5ptkhF/YLuJRqg89ZAOsXp+hH/XptVYrV:21gYdfuF/KuqfCOop+/XX+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOTATION NO Q-24570R1.exe

Files

QUOTATION NO Q-24570R1.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 609KB - Virtual size: 609KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ