2351899346089f710ac1c86de5d219b8f3dd8b2f6c17a1aac118fd2ec3a3db0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2351899346089f710ac1c86de5d219b8f3dd8b2f6c17a1aac118fd2ec3a3db0c
Size

596KB
MD5

6fc37afd1e80d8f4d251baf7fb202d48
SHA1

92af57979d551a5fafa718c23c221cc96ab5e1ad
SHA256

2351899346089f710ac1c86de5d219b8f3dd8b2f6c17a1aac118fd2ec3a3db0c
SHA512

47f5a8187275b24f7545c1a5d9d3f3cab16e86cfead3e6c6b97e606369fdc3c845934cd63eed316fab1c0b3bf66ee3bc2a7af28af4d05a5688a4e479b20cf170
SSDEEP

12288:4TuK9VN8Q5w8CX2RdJJ85GmIW2hqDPWdvBqx8QE+QL9f:499VN8Q5SX+dn2G/W2h4SBJFf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quotation.exe

Files

2351899346089f710ac1c86de5d219b8f3dd8b2f6c17a1aac118fd2ec3a3db0c
.zip
Quotation.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 623KB - Virtual size: 623KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ