Static task
static1
Behavioral task
behavioral1
Sample
Quotation 12052020-doc.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Quotation 12052020-doc.exe
Resource
win10v2004-20220414-en
General
-
Target
d58fb5c1a383e259686664461f83359118f998457164ab1ca15b51721100b984
-
Size
403KB
-
MD5
f8ec13a230a3a3843086ca3a1e593460
-
SHA1
fdc8e1048606d91a907a1dfbc53642832c3dd353
-
SHA256
d58fb5c1a383e259686664461f83359118f998457164ab1ca15b51721100b984
-
SHA512
84992de78e267502adc78c4be8a1f0b1092672fd5aafbe1c41b8dbd2a977aba1a50c624892c168227318bf3c1c0f6e058edb39f2eec97bba06d9b9c5ad4d3c47
-
SSDEEP
6144:NA5UNjc/d4ngVkPW6NcBQ8ZkoorWaJ0jnuOSky2BuvycwZNR77H5Ke8kAWcfB:aJangV0/OQUMC/RpzR775Ke/jA
Malware Config
Signatures
Files
-
d58fb5c1a383e259686664461f83359118f998457164ab1ca15b51721100b984.rar
-
Quotation 12052020-doc.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 492KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ