Static task
static1
Behavioral task
behavioral1
Sample
REQUEST FOR QUOTATIONS.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
REQUEST FOR QUOTATIONS.exe
Resource
win10v2004-20230221-en
General
-
Target
REQUEST FOR QUOTATIONS.zip
-
Size
1.2MB
-
MD5
e72b7ef3fde3f9be5beda1d2d6d24ef6
-
SHA1
b4e6fe0489fafa9a2c5db2dc90b609a6024166c4
-
SHA256
8e96747cd8f4a05e22455c34dedc5da98e2667da4985787404bc162c8f2055d1
-
SHA512
b296a1d364667e086aa64441daa52877427baff36db0ab196c0425f095b3941bacd5c9d71a467b2aae6621c56d3db277543fa399d3f01a9dd880512d2faadfdd
-
SSDEEP
24576:JM5RJwIS6Qt75nn+L0vcu3nFDEEkZe7/OfOwMJEX5S:JG4iC75n3/vkZK/OGVJEJS
Malware Config
Signatures
Files
-
REQUEST FOR QUOTATIONS.zip.zip
-
REQUEST FOR QUOTATIONS.img.iso
-
REQUEST FOR QUOTATIONS.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ