Static task
static1
Behavioral task
behavioral1
Sample
IMG-Scanned_May-2023 RFQ POs# PSP#-1839.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
IMG-Scanned_May-2023 RFQ POs# PSP#-1839.exe
Resource
win10v2004-20230221-en
General
-
Target
IMG-Scanned_May-2023 RFQ POs# PSP#-1839.exe
-
Size
493KB
-
MD5
8a8d3b11073892589428c936bbbf350e
-
SHA1
03b81f24fbdcfe75fe7eea7f1f6323d267d05107
-
SHA256
be2e502741ec2c35a2e681b330437fab4b2be5c44a81047db43aa669152c2fc4
-
SHA512
65cdb381b4c9747a37668cc8d1267da9d711b45d76d1d6acc7950e3d657dc142cf0527ca7003ae303f3cf85aa7eb5804e5a96988bd83e041472883929ba20d88
-
SSDEEP
12288:OZfzc86Xg4Tta9rhnrWTA/VjnTRq9sctUvXgc+jff:O9l6whrWWVHWUIH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource IMG-Scanned_May-2023 RFQ POs# PSP#-1839.exe
Files
-
IMG-Scanned_May-2023 RFQ POs# PSP#-1839.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 484KB - Virtual size: 483KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ