QUOTATION 06966[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION 06966.exe
Size

805KB
MD5

b42d3e399e257a345bc2549bfd400e11
SHA1

47d9b5c57c21efad56ce1d2e66aa9821b09716ec
SHA256

9cfed5bc98b11404bb772050f21ff79745ddd87586ba977ff3db792444b5c399
SHA512

af65848b66195f46399d4915e5ae4a56ea62a450cfbdcfe9e5cc5bb42c288dacad80bdc8db8544d23598b312712b837d95aacb71c62866bd33b328041e87d10d
SSDEEP

24576:gUOPypIzdWUgZxX1lU+oCrOdcMh3+nwSt763:gUOPypIzMUexbDrFMhOw8763

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOTATION 06966.exe

Files

QUOTATION 06966.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 802KB - Virtual size: 802KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ