Static task
static1
Behavioral task
behavioral1
Sample
RFQ410000003438995755100004.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
RFQ410000003438995755100004.exe
Resource
win10v2004-20230703-en
General
-
Target
10998a72def5626a9f8a84990d34015e.bin
-
Size
39KB
-
MD5
f65102670119ffb9780b9e993995f175
-
SHA1
449f8c247b1102162416bf015cf4b9b99dd11f48
-
SHA256
5e9d8944a5b442d07e6f84087cbc5be0aac921acd6d48c3c51cbd659755bf671
-
SHA512
8976461c49580b202e95e9b270fa4ae2fadb1c8f1ad9fb4757f956f361bbfcdcbf9161bf931420db816ecd633d82ea905d643fe545e3bc14948d4646e32b252c
-
SSDEEP
768:3NH0rPlXUzVYC+pR6YNDHUKvsEcJZUqwmpx0NqFs9hcZtGz4ofwKiAQQANe/QRY:31mUzVYCEpDRvsqqwUnF/AzRwZALh/z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/RFQ410000003438995755100004.exe
Files
-
10998a72def5626a9f8a84990d34015e.bin.zip
Password: infected
-
e8f82d344bddfbbaf10e9b379744a10eae1fe9015454e2d4893dce588661ba6a.gz.gz
Password: infected
-
e8f82d344bddfbbaf10e9b379744a10eae1fe9015454e2d4893dce588661ba6a.tar
Password: infected
-
RFQ410000003438995755100004.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ