Static task
static1
Behavioral task
behavioral1
Sample
QUOTE_23.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
QUOTE_23.exe
Resource
win10v2004-20231127-en
General
-
Target
NEAS.84b2a93616b088b6e2ac11eb984cf1f4a5483bba94d708b13a0c90c96124e249img.img
-
Size
1.2MB
-
MD5
4dce36fa1428d53ae8302b1be0978fa1
-
SHA1
ec985aa27cac16001351f70d541ea25782d88494
-
SHA256
84b2a93616b088b6e2ac11eb984cf1f4a5483bba94d708b13a0c90c96124e249
-
SHA512
f154f98bcdcfbc8d72af0466ad0ef0e807842e8190680d0e7de0d0b348eb860073fc666ec68196b62b48084b38b27987fd9c99b53f40858326b7a538ccbe1c14
-
SSDEEP
12288:wG3QmbCpAnMnaCyvb49Ho/3dyfoPKcarxvHMMQ+eUW:pMna30HI34wyRtrQ+e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/QUOTE_23.EXE
Files
-
NEAS.84b2a93616b088b6e2ac11eb984cf1f4a5483bba94d708b13a0c90c96124e249img.img.iso
-
QUOTE_23.EXE.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 670KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ