Quote[.]exe | Triage

Sharing

General

Target

Quote.exe
Size

685KB
MD5

96227f6b68d28f349677cf657896ec8a
SHA1

e7be61d3afbfee4d4ec4a1bff9b7c206852814a2
SHA256

fad241104ff46cc7d2c54f6847779dfec18c6bd51bd6114ec2d120f93b61eac9
SHA512

38650a3c08b9947b913c39771e6ee27deda3d0ee19b93362ad5dfaac7ff18c9b7b0daa2b90bb0a636ff8d6d1a5d82379d1df474499f61965cf1066147e12c7a9
SSDEEP

12288:TOHRvnXzeLAfRk51Lkyl238MS2HT0Mwjh7vYyA+gn5rVJWfqw:eRnXz55k5pl2u40Hjh7ghT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quote.exe

Files

Quote.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

zRvY.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 682KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ