Static task
static1
Behavioral task
behavioral1
Sample
New Quotation.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
New Quotation.exe
Resource
win10v2004-20220812-en
General
-
Target
New Quotation.exe
-
Size
344KB
-
MD5
1f1a8ed6991d3bd2ec6b87b9afcbbfad
-
SHA1
3b781e91dd7d3b1ca38e43a3266435aebdba7f36
-
SHA256
b4fb4c496f4efd9fbff3e7d11835adae098bcaae169f50132d61f8f0a34cba37
-
SHA512
68183ca56d350007975bc9e85157168b214444d5d944a5363ddb401db6aef597c8fda0579933e107bdfea3a62765dc1fc5ec6836ca8428cfbb7a74066ec21077
-
SSDEEP
6144:nBLWKguHR4Pkv9CKksa40+w0DtzsROLdrClNDndaIuxAe/CE1OOGOO/OOUYvY8tR:1wFkvEsa40+w0DtzsROLdrClNDndaIuY
Malware Config
Signatures
Files
-
New Quotation.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 732KB - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ