Static task
static1
Behavioral task
behavioral1
Sample
RE RFQ-Huada Superabrasive Tool Technology Co., Ltd.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
RE RFQ-Huada Superabrasive Tool Technology Co., Ltd.exe
Resource
win10v2004-20230220-en
General
-
Target
3a2f541b7a4e7735ee0552f6a25d7408.bin
-
Size
835KB
-
MD5
c285454840199bddff7cd5d18c09a56e
-
SHA1
84ba1bece2d41bbb9f6f768cd546fe0fdf2f6f0d
-
SHA256
9060b9aeabe6c6517900d77f710f47e413210639ea3153c2291807e3e309ea05
-
SHA512
6a691ccf5911890fa046ef2416d4bc58f0125e8f448829ea21cffe6b1f1d909e7810dc9b13a659715a32266b34c30d32a6b78d0b980074509df1a9b18c65f1d8
-
SSDEEP
24576:oDR/XJtqRQ1ZpHEYXLGwF9lVIWF8jA59pXkCruO/bXX:o5E2LH3xnlVF5PXkSjXX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/RE RFQ-Huada Superabrasive Tool Technology Co., Ltd.exe
Files
-
3a2f541b7a4e7735ee0552f6a25d7408.bin.zip
Password: infected
-
0b6d509b045694a6a8e53eb80f7495e5254583c2626bc3efc5cd3b35f89adaea.r00.rar
Password: infected
-
RE RFQ-Huada Superabrasive Tool Technology Co., Ltd.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 830KB - Virtual size: 830KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 234KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ