Static task
static1
Behavioral task
behavioral1
Sample
RFQ#ENQ-1885-23-TCR-Well Head.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
RFQ#ENQ-1885-23-TCR-Well Head.pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
RFQ#ENQ-1885-23-TCR-Well Head.pdf.exe
-
Size
646KB
-
MD5
21e0203ba3bd62043d2020f5f2cc1ed5
-
SHA1
6e09e905e73a9aa1ff219867b5a0fc415b0e5c3f
-
SHA256
ea334a8065334c73ce7ab24aaf3aa8d2bf400bfcc1389b5859e76348191a43f5
-
SHA512
d0fdaae8b75f93eedef20d4c4cef1ab53f292b2e405040c77d354774032c73570c62ca88f53222a5410f1fb1ecb968040c5d1e7bac2693f15cacdfb524da6989
-
SSDEEP
12288:ORg5/hHHL4DN+K3PKiTfK1yncmemEeiXTNFNTGLVZEbVgU6h:ORI5GNpCc7cmemwXTPILsbVg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RFQ#ENQ-1885-23-TCR-Well Head.pdf.exe
Files
-
RFQ#ENQ-1885-23-TCR-Well Head.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 638KB - Virtual size: 637KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ