Static task
static1
Behavioral task
behavioral1
Sample
RFQ 3728422023 pdf.exe
Resource
win7-20231023-en
General
-
Target
950d7ba3511783a6a30c8ce19dc6a91e.bin
-
Size
526KB
-
MD5
43ba9396c9e58e062b15bddccc667e41
-
SHA1
3c094c3d366513de5be3b15c94b4042b92e09b0e
-
SHA256
acf4df3cdbba4d03d7e4b48e71a2d690c19ed08d8cfd7fcda0f003af9f607e17
-
SHA512
fcd6a63e5011225766f3bf3f50cee103e2163a9611dcca7abf8f2f452cc24c5895eed29b5a9f7c4040cf3189d2dbdc0088bf58ff2595835dc1e05b040d1e0521
-
SSDEEP
12288:5ks5nottu8MX9+tE3dSVQreRWNrzo7+MwtvXr9v2XWuC3Bg74luz:isWttuNXVdSVQyRWNw7+Vlb9M374i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/RFQ 3728422023 pdf.exe
Files
-
950d7ba3511783a6a30c8ce19dc6a91e.bin.zip
Password: infected
-
c0b6c699072069ff553e7a17c9c43961ba97d3a73c0dda64ea297d1ef9d0c75f.zip.zip
Password: infected
-
RFQ 3728422023 pdf.exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 541KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ