MACHINE QUOTATION[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MACHINE QUOTATION.exe
Size

204KB
MD5

93f877a409750144a5cdb8ddd0285920
SHA1

9201bbd17eb63f4352b461adb4303226752013b4
SHA256

67a14b45d6acb53b6d76c3a49127dcd56c2cd1716b37fc6fe2aa93dfd053714d
SHA512

3b5159e22eba62773657f8343861bea20a411bc518ee15e164342c15e96b7748c999b273c728cd99868b7a8163fde39031060b5d81f16f2caffba613df7eb3e0
SSDEEP

3072:eHUBNnCDDRvLGbrOAOkGt6+duWA/t/SHUebbxCbGgKk12qk/oPYm21KLbDoU1sNY:GKstvLGyELbMUTKZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MACHINE QUOTATION.exe

Files

MACHINE QUOTATION.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ