quotation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

quotation.exe
Size

610KB
MD5

3119e5091060068cc37c8478d241d038
SHA1

43c694b17d97b712f61e1affe90a3ee26e8caa5d
SHA256

2138dbdfee8ee957a0b9d2475b12d71e80a4e93d3f70aad66015bfc332021a50
SHA512

7ac4cacef8e644fd1547494307a9a5e39765b4663efb5a5569e5ba80069244748d2e24b1b8e949baaccbda75f9ed2d79ee48f48968dcd8510b81f5c407782f14
SSDEEP

12288:SG725HiWxZojfp5j9rGm8/JldjqxH/aWCZe2COj6b:6ti8Zc5dcdehacu0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
quotation.exe

Files

quotation.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 601KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ