Quotation 22001625_[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quotation 22001625_.exe
Size

1.0MB
MD5

1d031315ac425fdcc2c01a1a81ae5f51
SHA1

0f47dd9f622fd4d7877bdf478b50a82760e471ef
SHA256

aed942cebdb1921497a87fbda39d1d06f203d1687bd51489bca2635fe9489105
SHA512

6db39e18a22e9b7888dd92e4e5d2087d8903637b0d4ff66345bc3d0142749b9c436b1653b221783497cb259503634f1247d6216604737200fa49c4c9e3e55f5e
SSDEEP

24576:8DPTrJ9EPegxCAjcyiqQhnDbD4vKXWY9TLI67:U3yiVDSKmkL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quotation 22001625_.exe

Files

Quotation 22001625_.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ