Static task
static1
Behavioral task
behavioral1
Sample
ORDER LIST_NOVQTRFA00541·PDF.scr
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ORDER LIST_NOVQTRFA00541·PDF.scr
Resource
win10v2004-20231020-en
General
-
Target
31973278e42bbfbffe3cd85a38276c4c4a6870c56828e45c5a828fe575c08775
-
Size
612KB
-
MD5
cd295a5fafe883073dc2819cc6565a77
-
SHA1
03ceb861829c1da7ebabd0c4a6592254b1f1ae93
-
SHA256
31973278e42bbfbffe3cd85a38276c4c4a6870c56828e45c5a828fe575c08775
-
SHA512
80d88777f09266e9908e11e44ee2dafe78f97d65731d04d6cc65049353c86870e43ad9c0c367c5562b7f1ca9c7516d389d133431bd78ab71b73cd4a4eb26f149
-
SSDEEP
12288:jvtpQyfiBpsJViA3ymsYv8kRXxVcAbZRfPi1FKm:btuyfiaoWsYkkR3Pq1Em
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ORDER LIST_NOVQTRFA00541·PDF.scr
Files
-
31973278e42bbfbffe3cd85a38276c4c4a6870c56828e45c5a828fe575c08775.rar
-
ORDER LIST_NOVQTRFA00541·PDF.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ