Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
QUOTATION.exe
Resource
win10v2004-20241007-en
General
-
Target
76ae1742d7c4a98124b617bc22a32c2b5c924f51410d3e00da1874e3ec9f5368
-
Size
603KB
-
MD5
b9687a20a4bbcec1237913665ea22556
-
SHA1
7ea99cea62ba51127fe98a0cf25f1691ccddf803
-
SHA256
76ae1742d7c4a98124b617bc22a32c2b5c924f51410d3e00da1874e3ec9f5368
-
SHA512
82cbde936d42cab23a5d56056b085025cebbf77b28febd309739e09a08c61b0c6055800780a9fb34aee03e836d4f8bb33aa77327ffb5de03da587c07d1c2eaad
-
SSDEEP
12288:HR1d2KqHk88HkfsthtJXzi2lA8P3KWcty7y5Ld41MqkM8VpH61xzk9Ohnv:x1KEfk0thtJXVrP6WC5L6mzM8Hkg8nv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QUOTATION.exe
Files
-
76ae1742d7c4a98124b617bc22a32c2b5c924f51410d3e00da1874e3ec9f5368.rar
-
QUOTATION.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ