Quote 1T PN40 082624[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quote 1T PN40 082624.exe
Size

771KB
MD5

71a3bc1ff0e3828d7adfe71aff2ba94b
SHA1

1c6a5834e0259d491c47d1b840c7fe2b29d11d49
SHA256

60734325fb48873fcbe11315a91032bef2048981cd35cdd24c6502cb81b03d92
SHA512

b7e314eb95118446279e49e9ff4a3e59ea388fc0a63eb3d5cf109a789434020d733e95cd344e99648d6da2c648b727dd15659ccd2fe98a1085bd57deca327946
SSDEEP

12288:jYvIGc2bABumRZER7tLvmczUBH6kx8uNj/PyO1QpvtaCZM3saqk9IOJP:kxcBu0oyAvLuNjn/k1vQsLqIO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quote 1T PN40 082624.exe

Files

Quote 1T PN40 082624.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 761KB - Virtual size: 761KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ