Quentin954Edward[.]txt | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quentin954Edward.txt
Size

337KB
MD5

762043af56a704bcd34b4e5072c51919
SHA1

e2725624c1e2b6df941bbe062419cefe64029fee
SHA256

1575a221aa79885666f2bc19f42b5dcdb855252e03a11a32a2e2a5efc3bbee9d
SHA512

ffda4cda7f7fc4b69ba3b41507e3e3cebe877554e8b31f317fc03852073c52e5ee9b04a6bcd729bb0016746f974fd8f11aacc1fff8b0881a591704d6a218e957
SSDEEP

6144:MkXY8MikzFjAzvTl3eVMKtonxojsqVhjrfQGLRvXs/dHFSzNYMw3qCUJzbnoA:vVlklepRPxoIqVhfjLRvXs/dHFSzNYMT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quentin954Edward.txt

Files

Quentin954Edward.txt
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 334KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ