Static task
static1
Behavioral task
behavioral1
Sample
QuotationSpareVMJSESpare202304002forM.E.FIVEVALVE1Ref.BM230423KU05.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
QuotationSpareVMJSESpare202304002forM.E.FIVEVALVE1Ref.BM230423KU05.exe
Resource
win10v2004-20230220-en
General
-
Target
QuotationSpareVMJSESpare202304002forM.E.FIVEVALVE1Ref.BM230423KU05.exe.bin
-
Size
597KB
-
MD5
7862c6e08fcde4916ecee1d0bc8ed9c5
-
SHA1
cb14f0cc39d3714569dc2e7fd986d987a6c32d54
-
SHA256
62d357696687f648091816eca9e33634cdbb61059b37005fc990f926d9f5860e
-
SHA512
aa0de9dc077e411b788b8857e963c5b57f4d7f162e14608e03df1378887a861259c94a4dc1f0a03c980e5fd4330e85884fc447b49be24cea523b5d472488cb95
-
SSDEEP
12288:Rn4oPQ3FBIdxYc/U77/nHY+Oc8AWw0usC4r:RnlPQvix7QDJLpt4r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource QuotationSpareVMJSESpare202304002forM.E.FIVEVALVE1Ref.BM230423KU05.exe.bin
Files
-
QuotationSpareVMJSESpare202304002forM.E.FIVEVALVE1Ref.BM230423KU05.exe.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 594KB - Virtual size: 594KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ