Static task
static1
Behavioral task
behavioral1
Sample
FRQ @ Quotation Sheet.exe
Resource
win7-20230831-en
General
-
Target
JC_28a4e0751ba38ebe64884389d27c25050302e602955f37074048d1db68fd5b32
-
Size
573KB
-
MD5
8754fb569c32855d1745ef2caf3d4a48
-
SHA1
aad874891209c2140cf3304fc442de1140dd28f6
-
SHA256
28a4e0751ba38ebe64884389d27c25050302e602955f37074048d1db68fd5b32
-
SHA512
d12aec0e810c64cc33e94f73ff19dbd9aba0849cc2085eb9555b22c2dfc95d9bcd5a3ca84868df43ddf530f8884a2f7597faf2483848161bf14ae0d708a84a6a
-
SSDEEP
12288:bsVC3GzSAWiUwYBRLXKm+1AWMpnkFwsZzZ6wxQcSGdyDcny0x5GKmL8n:boerNPLan1AWM5RsZzZdxQpGgonx5GKt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FRQ @ Quotation Sheet.exe
Files
-
JC_28a4e0751ba38ebe64884389d27c25050302e602955f37074048d1db68fd5b32.zip
-
FRQ @ Quotation Sheet.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 629KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ