ee41e0de840472d7274e42cd44fc919021792e248a84496257816abeda81ccbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee41e0de840472d7274e42cd44fc919021792e248a84496257816abeda81ccbb
Size

210KB
MD5

1f34e86fa4e15acfb2611076e3d3bbd9
SHA1

eeba38a92b2e710ad0c56e06ec181c2d05d62feb
SHA256

ee41e0de840472d7274e42cd44fc919021792e248a84496257816abeda81ccbb
SHA512

6b437ef32f56a5d4352c10e90e25a210afe0850fd51ca8aed312997254e69cb4a526bb399478e95f42a3d9b747d57d174528d7e9c9734a38fe0dcbb86e5979d4
SSDEEP

6144:pyTxsPt8C8Gmd2MQKADvyO9sGTkkLd1DUT:IxsFu5QRSws41q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quotation.exe

Files

ee41e0de840472d7274e42cd44fc919021792e248a84496257816abeda81ccbb
.zip
Quotation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ