Static task
static1
Behavioral task
behavioral1
Sample
Quote SQ-106572.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Quote SQ-106572.exe
Resource
win10v2004-20230220-en
General
-
Target
Quote SQ-106572.exe
-
Size
819KB
-
MD5
088599f80dc5a3664b31186c02728ece
-
SHA1
91f760b523ae5ede45c604214286db1a2bbde038
-
SHA256
a664143868ba14df65aac079d2039c105c2450ae12d0cbc8b0ba75ce931f734e
-
SHA512
c414b39c5e181bf73425094cbe669e02f6763dd627e41852394646ecc824c7d5dbfd0d798723117c1807ab2e122e50381d0db28b9abfb6d8f795c2f5762b1a14
-
SSDEEP
12288:oHidKB6sGw08vMTVc6NMlfVmwEwlwesHttLrW2v60gT5zAU:C9I1kMhc68VYcw5tr+T57
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Quote SQ-106572.exe
Files
-
Quote SQ-106572.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 656KB - Virtual size: 655KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ