18324f8a9bae7b10be8fac349d51f365e07c4f1dc94b2ac9bff2c94daedff591 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18324f8a9bae7b10be8fac349d51f365e07c4f1dc94b2ac9bff2c94daedff591
Size

1.8MB
MD5

878f1cd4e3a9f9d64c41e469f15b531a
SHA1

aba42219d75867afe5f646c05052dcc5c0eefc7f
SHA256

18324f8a9bae7b10be8fac349d51f365e07c4f1dc94b2ac9bff2c94daedff591
SHA512

9a941c230a49039f8bf48f8f2488443c4e385ad64831c95dae043fc3ffd1ec67de1f19cd89d1f1dcbd4807e47941599c0dd1ec118c7eb8f32086b6c15b25e831
SSDEEP

49152:xIZdlUIVOzDysKSjcvhO5Z7GIwpRhyAdkJw2Cn:qHUI4fpKGcJO5Z7WtSJrCn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Quote.exe

Files

18324f8a9bae7b10be8fac349d51f365e07c4f1dc94b2ac9bff2c94daedff591
.zip
Quote.img
.iso
Quote.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ