Static task
static1
Behavioral task
behavioral1
Sample
144MES_S Quote.exe
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
144MES_S Quote.exe
Resource
win10v2004-20220901-en
General
-
Target
Quarantined Messages (2).zip
-
Size
977KB
-
MD5
c076f6d0459c93a574082577581af35e
-
SHA1
471fb685ee1275c12b645dedf9e96fab0db69794
-
SHA256
0f7c39912f4837bd4328a52826b193e6b04f665015fe28ac3b12afdfffe5efb9
-
SHA512
ba1bfe3c4e74ac32082598e7f225a5fc187a440d74ff96970954de68253b9cd8f192c3cf580865a2f9af4efe73592b124868f433a72d7980b27c752d9da9644e
-
SSDEEP
24576:IYSNxarjfm68w6JdPS+JsfI/SsEu41p+6rX9odj8qSeoJbZYeLZ9D:IYSngj+fw6J1S+GfIasEuCpVrXewfWOF
Malware Config
Signatures
Files
-
Quarantined Messages (2).zip.zip
Password: Welkom01!
-
3a635eb3-b816-4a9f-d101-08dabbcf2237/302cf080-0637-778e-224c-96851633d8b2.eml.eml
Password: Welkom01!
-
144MES_S Quote.img.iso
Password: Welkom01!
-
144MES_S Quote.exe.exe windows x86
Password: Welkom01!
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-2.txt
-
email-plain-1.txt
-
image001.jpg.jpg