Quotation List[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quotation List.exe
Size

728KB
MD5

7ff09959bc7f2486d18f2de3e3b6b091
SHA1

2434824d462ed714adeb343f47885e47ad1b41ca
SHA256

017d31e9efe6e8c9d635dcfe1e133ca99b1eae94e02db700c0e75e0a3ab92c6c
SHA512

1a6bccf3a627ed7294912a949ef49308bc8c9de075f472706dfd74e7109d79357db660cc53ce7a16f4a1c8e2cc581b0d91790c90177c1098c4c4206be297cd89
SSDEEP

12288:2gsRwTiqyJMWEYTOzGZioGpti4I4y3AT0vUrDI6jy1LcVQEcV0sibHYE+:4e5O/IKZinplYt6I62Jc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quotation List.exe

Files

Quotation List.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mHfe.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 725KB - Virtual size: 725KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ