quote 200006595[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

quote 200006595.exe
Size

712KB
MD5

1edb3dbe55bec2b356eeddae9c5044f4
SHA1

e1e61d1c40b5866abce46914ee2e9a71aaac1a9b
SHA256

9dcffe8f3437c5c785db60eec5594c3b22ebbec969f02de1ba545b3a70a648e6
SHA512

93bd2211bf1f8e0b21358c1a667034cab84d842af1ad0415b089dd38c48fae2dbde775a0e196399ce1bc27bb4d826eb50c77b37a1c56b195197aa12dd6a731f9
SSDEEP

12288:dKGJ4lxJ+QyzYfhzUqXWQwGH41YH+EsqLyvIqX/2rqyWHBA:dEJfyzwOqXQ1YeEsqLOTv25e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
quote 200006595.exe

Files

quote 200006595.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 709KB - Virtual size: 709KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ