Static task
static1
Behavioral task
behavioral1
Sample
Items Description RFQ_STE sa_Argentina..exe
Resource
win7-20230220-en
General
-
Target
Items Description RFQ_STE sa_Argentina..exe
-
Size
684KB
-
MD5
f4a17b8e7d924cb0981a717aa945117e
-
SHA1
10cc4273cfbe1f0876696fb0e046370b4f4f26fe
-
SHA256
4baabf9e31ff1f2fec8fa4f3165d5456836c307591bf8840ec5a8074759fe742
-
SHA512
d568ef1835f7f843484590e796cb5293946e14ded7a8619a35f2834536464ed20276f6d38683497b8b1dfd1b2e85fd06a54f65ed32cb8bc98a043c23aa3dbc02
-
SSDEEP
12288:1tJx0YPX/NqPs6UQHPLzbQexNf8t8TPljvyqQ4HYQyC0UvYU0yyRw:1t8HPs6UwLzbRf8teljaJ4XB0U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Items Description RFQ_STE sa_Argentina..exe
Files
-
Items Description RFQ_STE sa_Argentina..exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 672KB - Virtual size: 671KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ