Static task
static1
Behavioral task
behavioral1
Sample
QUOTE_RE.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
QUOTE_RE.exe
Resource
win10v2004-20230703-en
General
-
Target
Quoterequestimg.img
-
Size
1.2MB
-
MD5
70b80835d27d61987d5b8e722f794b70
-
SHA1
ca493029f9cc4b834b050068f562ed3888b144f5
-
SHA256
89158a45032d2cdb909e078ef2729bebbbcedf6ac9af01bc02f8107c199ef5f1
-
SHA512
ca646e6cce5d09864ea4acef45b3df367a80ceeefb5c9360abde744831d0a6b1b8dad3606d1a9ba6734d00e49393ced1d3ec0c5a4a71751590258d10133466da
-
SSDEEP
12288:3Su0Ol/Jf0BPIHSteE4p5wRxv4qxYpLFqRROMokPYT:3B0OtJf0BPIH8efr8v42YpZqy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QUOTE_RE.EXE
Files
-
Quoterequestimg.img.iso
-
QUOTE_RE.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 531KB - Virtual size: 531KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ