QUOTATION[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUOTATION.exe
Size

643KB
MD5

ebf89d3836ad1f5c25511751d2428901
SHA1

a49f663d8519879d414f10b136140687efbf52b0
SHA256

91499b570a98b7fd30a72d921d5bba82bd96918f8ce06532de3ca2362e1d5c35
SHA512

b1101356fedccf8b5274049ab4d5a566f6da288b95ae8eeb5efe6e03cd493753617cbd128591a32d5a3c547abbb704cde1622ef5f2707c64c40bc889de5f9e7a
SSDEEP

12288:ho361h61EWGcPFqba5VPL0MuD4raxpsBhKIWQmjxKzf361:hNY7Gcdqba5VQMuDoaxp4Ep

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOTATION.exe

Files

QUOTATION.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 625KB - Virtual size: 625KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ