Static task
static1
Behavioral task
behavioral1
Sample
New RFQ - CO213538PDF.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
New RFQ - CO213538PDF.exe
Resource
win10v2004-20231020-en
General
-
Target
03d4cd64d2f6d5f9a8897f3507b6e4e7.bin
-
Size
836KB
-
MD5
962a3ae07933d15b8dcbf610a45cb6a7
-
SHA1
30b5b39a6f7714ada4fd63f16e539901ac6e24f2
-
SHA256
ea52503bb15d29acc8c32bb55a5f4d380aff4ff73658be38b977c630643c2b82
-
SHA512
eb44b287f8c5dc939db3590811b34c2d8ece6cba85e0eae4280d35368fdb1a8c713bd6fdf4e2533ea0929f4dea8f3ebd3a3665935b45511066a64baca54f5eff
-
SSDEEP
24576:at6wac1gK8KbI7Bib1RDSyMql7+vHXsUFIv150Afw:awc14Fin2yfcHXrKjfw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/New RFQ - CO213538PDF.exe
Files
-
03d4cd64d2f6d5f9a8897f3507b6e4e7.bin.zip
Password: infected
-
10c7529595589edaefb4335f222e725d1ead2a883894fd582651367a47f1dcf4.ace.ace
Password: infected
-
New RFQ - CO213538PDF.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ