Static task
static1
Behavioral task
behavioral1
Sample
Quotation.exe
Resource
win7-20240704-en
General
-
Target
MalwareBazaar.10
-
Size
842KB
-
MD5
9c48437f190dfb0958e0293000882802
-
SHA1
a37e32b69fedb87ca90b172fe0839b85c7b92444
-
SHA256
46a534c55f60d8e902a84484a2c0d4bb750d0eb926ebab10117160c1f1aa0081
-
SHA512
897bdaaff48b0ec4cc5e3d3114418bf5ce9f3d5d9f5da343a564e2132dc62b0b145bd56526b601a8b8d954b7041af0ef27be068ecc83eb8b12aed048eaec1dcf
-
SSDEEP
24576:tk8NAYRng7SeKCRIfNun0dRn4ynCOv26cf0XzLZ:qoAYyKCRQu0/nFdBcfiz1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Quotation.exe
Files
-
MalwareBazaar.10.rar
-
Quotation.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ