Static task
static1
Behavioral task
behavioral1
Sample
RFQ#00388-SJOMAN ENGINEERING LLC.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
RFQ#00388-SJOMAN ENGINEERING LLC.exe
Resource
win10v2004-20230221-en
General
-
Target
RFQ#00388-SJOMAN ENGINEERING LLC.exe
-
Size
885KB
-
MD5
0db685d98e98abaf4214262dec358b6f
-
SHA1
66b3f2a05061b53ecc5ef881400f1ef30452f2b3
-
SHA256
66b93d3953720772c3adf5f424c5dc4d5e6a61c7e9d08157ccf8ad9eec069f1c
-
SHA512
5896e9851f34b82f0a4da16f698b12ccca1c6685480d9dda8de09c51263f0ec8d3e888166453d84e5b0e5f52ef4968d51d2b4410e79421b5153282bb16d8f478
-
SSDEEP
12288:IKQa8hYsUkIq6HE0rwKfNvhM8fhLsYX8CdClLqbMqcESTQxNqv6nnjqKoeM:IT0p7rFNvhMAsYZduLDPEp26nnjqKoeM
Malware Config
Signatures
Files
-
RFQ#00388-SJOMAN ENGINEERING LLC.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 665KB - Virtual size: 665KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ