e84cc39c16fc78cb994ac23d13819078789821b1926fc77f607b4198d14345a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e84cc39c16fc78cb994ac23d13819078789821b1926fc77f607b4198d14345a4
Size

668KB
MD5

0f2be5b9df1625e2b8afbbd039f5b1e8
SHA1

c5e14b387696376667522f51ec9e173f27e6e7ff
SHA256

e84cc39c16fc78cb994ac23d13819078789821b1926fc77f607b4198d14345a4
SHA512

a0ccb95230093343fd9774d77471931fe8b5e1c677e7cd07e366879dbf69b73b96b6c0b0c2e3320d50a9c97d2ae83dbf0667f7245b3dbd1d55955b023d2e5cfa
SSDEEP

12288:QCubAURr7aA/hBYCYWeXiYFUuUsVgCacsPlFRXj+4jNDrXEGRR1nBF:QCuzRveyYFUzzntXaQh425F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quote.exe

Files

e84cc39c16fc78cb994ac23d13819078789821b1926fc77f607b4198d14345a4
.zip
Quote.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Uksy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 695KB - Virtual size: 694KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ