Behavioral task
behavioral1
Sample
LOI RFQ-0291110088902903847782022280284722111-PDF.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
LOI RFQ-0291110088902903847782022280284722111-PDF.exe
Resource
win10v2004-20230915-en
General
-
Target
66d93fe0ba176b6d25189ceb19f7a57e5971561332c7a510de055a20726633c5
-
Size
1.4MB
-
MD5
b5129912d6b5e89c8598540473299e82
-
SHA1
9f76527eb8fe8033ebf84b0e6f4f55e7d01a2c6c
-
SHA256
66d93fe0ba176b6d25189ceb19f7a57e5971561332c7a510de055a20726633c5
-
SHA512
d0db9a9f4b5f43a3a7bb25b75add4624b0e3defc44237136a22f39dbf4daca102b6718bd120c54f1ab081a01712fd0f1dc798108e4f5174bdca3eab6c6e172a1
-
SSDEEP
24576:YxnvHMlA/E/GypJLHBqsEaUfsIcP/RFdQXeqp4bCPvMxJqZFIbpM:YxFE//GGPZAF4SECkM
Malware Config
Signatures
-
resource yara_rule static1/unpack001/LOI RFQ-0291110088902903847782022280284722111-PDF.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/LOI RFQ-0291110088902903847782022280284722111-PDF.exe
Files
-
66d93fe0ba176b6d25189ceb19f7a57e5971561332c7a510de055a20726633c5.zip
-
LOI RFQ-0291110088902903847782022280284722111-PDF.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE