Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION 17729.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
QUOTATION 17729.exe
Resource
win10v2004-20230220-en
General
-
Target
QUOTATION 17729.exe
-
Size
650KB
-
MD5
fa4446b6943af18f93d2781f6483456b
-
SHA1
6fe38fd92e36dba16a45200de8e3bd13089e1bb3
-
SHA256
23790142b08cf28a63d035582127794c1c3dcadb7319a93a65280953f9155499
-
SHA512
6b003fa11d3c3f768a443c9216c5b1d4df4760545e3db0fae41e00908db7c33b141840fb9601e101edab6af88ebbf4d915c9b271f13432eb27942b7bb9660104
-
SSDEEP
12288:/ql+tdvMsmeN/ECtY+MtyEMLVqYR3dkb3hnc:Z/vMsmeN/YvtylqYN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource QUOTATION 17729.exe
Files
-
QUOTATION 17729.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 647KB - Virtual size: 646KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ