Static task
static1
Behavioral task
behavioral1
Sample
ENERCOV RFQ (PO 20225181).exe
Resource
win7-20230712-en
General
-
Target
ENERCOV RFQ (PO 20225181).exe
-
Size
1.1MB
-
MD5
2a46dbb7dd532d1d6624887801988e5e
-
SHA1
0908803bedca22350152b0be22eba35f84d5b6d0
-
SHA256
8114a7dc930bc7b12b35b25d097b7136649c1633f9a0cb2792498aaab7a68936
-
SHA512
a0b735c1490bc802e701049039a29c624e086e4797091e2dbd78d9ba9c743995c7275e979f543fc129f71d0040d2573643619746e48811dbe6a6993021d23f56
-
SSDEEP
24576:ltmmjBGjFVtUxZPux3AGjUCUMqQnFPZitJ4z4WQ:lKPt+5uxVwQnhAazpQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ENERCOV RFQ (PO 20225181).exe
Files
-
ENERCOV RFQ (PO 20225181).exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ