Quote[.]gz | Triage

Sharing

General

Target

Quote.gz
Size

909KB
MD5

9feb569f15fe97068478467b68737272
SHA1

4a5339fc4249265c5e18d603e4dea3fb9c2dbf8d
SHA256

b672afc774d2c57bce68ffea72a0236019a2bfe9fdae61b6deac4906f9dff2ce
SHA512

dcad99fe1bb5eca8c489940581bceb4f02462bca9f3aa5b244bc9af1db044b690526308bdbf99343eeaeb2b456c8dca2bca6153909c481eedb293a80649f9947
SSDEEP

24576:ZKjP5SHpLTFTelHztd6t0EKLVseDLES5Gu/7H:ZuAR5EHpbRVFEzub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quote.scr

Files

Quote.gz
.rar
Quote.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 972KB - Virtual size: 971KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ