Quotation 1563058092XXX[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quotation 1563058092XXX.exe
Size

685KB
MD5

5d6dc0cc7530a4c720d000ebd2818bdc
SHA1

1d7506c3bb104fdf4eff1a7502c24d26059cb060
SHA256

c37ab5dfe51203a7597c48320584457c90fdfa9c9d0f8f6a86e24a5f1e719463
SHA512

9a335dc95dadceecfce69d17c8573aa6187ffca11660d0dd78d8bdd27253e76f55d6722fc9a1b38bfda8f7fcded14f82327e689b0d94159b40d50c4e791c99eb
SSDEEP

12288:mjUgC74CMw1+i1kfj9M0FbBJosy2f5huX5JJ5m5OMz7VpkKI:mjUFn+i1kJ1VpUX5T5bA7n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quotation 1563058092XXX.exe

Files

Quotation 1563058092XXX.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

urZD.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 682KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ