Static task
static1
Behavioral task
behavioral1
Sample
RFQ no. JULF247-QN22110077·pdf.scr.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
RFQ no. JULF247-QN22110077·pdf.scr.exe
Resource
win10v2004-20230703-en
General
-
Target
RFQ no. JULF247-QN22110077·pdf.scr.exe
-
Size
499KB
-
MD5
0df08ab582f19745c569b85f44d69ce5
-
SHA1
5a9fe479676fd9f52056543281757eaa6e4bc9bd
-
SHA256
a2d2a62835ec13260cc35eb5773e32b5205adf74c8dac852e614f6034c634309
-
SHA512
74a35fd057e8cb7756814459b1b4b3c041b8d6596b480cf4397c27985cc71afcd68de8578ae3a5261fc3c45d375764e689045103150c309aa419b9bf004b49c2
-
SSDEEP
12288:sFjxMClnVIZ+Z7BNpWxAlbYTONZtNIkb8ZyS5AohGw5rCD7HcOm7PHY:sFiClnVIQBLSGvNTNIkb8v5RhzrAHcOd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RFQ no. JULF247-QN22110077·pdf.scr.exe
Files
-
RFQ no. JULF247-QN22110077·pdf.scr.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 496KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ