Static task
static1
Behavioral task
behavioral1
Sample
xeaa.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
xeaa.exe
Resource
win10v2004-20230915-en
General
-
Target
RFQ-210934039200RFQ492919_pdf.rar
-
Size
257KB
-
MD5
93d613a1f3e8b769bb7257ece098c10d
-
SHA1
250a8298c5b8a9cef390caa7fbe5bf36fd539056
-
SHA256
246e7c8ac80daab00e7843b2be3a9ea582c5473efb37af1a5bdcc9c21e94a42f
-
SHA512
4ab60509e482fbf8d11550e2ef67584fcfa0efc566470daba7cdcadcec6b34d521b9c2561da6ec032496e94266ad2e7acb34b4bd3170cca5c9e67747bc3437f1
-
SSDEEP
6144:XCQNtP3mktVoGQwC1cO2kcqVFIcgZR+WmvEPEl/:RL3mkzoGo+kucgjVk75
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/xeaa.exe
Files
-
RFQ-210934039200RFQ492919_pdf.rar.rar
-
xeaa.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 584KB - Virtual size: 583KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ