FINAL SELECTION SAMPLE QUOTATION[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FINAL SELECTION SAMPLE QUOTATION.exe
Size

620KB
MD5

b3a6049df6caece43dfe7484f80519c4
SHA1

a491ba22cc0b212d40596b0e55c94cd91b21c1f3
SHA256

afbcc4589635ef9e83579c9865d99e7b454f827e5ae02b8248db0fc73d9553c4
SHA512

53b7653b09ea0716e6a3765237a392d85bab576aeb487e96309b22e1c5af1a5d41ccfa90ab0937c7f989490ec915a62fb2c3f683e04a5aa6e9e6197ce4bcdf52
SSDEEP

12288:ozfqBAfWF5ImLXVo3BHl2hHmR/nt/UjxnOCNW8VIHxCkD:oT6GWFOmLFoRF2hHmBnVUNOf8VIHH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FINAL SELECTION SAMPLE QUOTATION.exe

Files

FINAL SELECTION SAMPLE QUOTATION.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 608KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ