Static task
static1
Behavioral task
behavioral1
Sample
qoutation.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
qoutation.exe
Resource
win10v2004-20231127-en
General
-
Target
e001c2f271aba2dc061893a0c912a1e6e907deb70aedda58be943dd232342c86
-
Size
698KB
-
MD5
27a0e27133f82407a96891fe5c3f1a71
-
SHA1
456db55c76b3cf6f57db19155533d54a6553cbcc
-
SHA256
e001c2f271aba2dc061893a0c912a1e6e907deb70aedda58be943dd232342c86
-
SHA512
256f7eda8f5209455cd1fcbd1191a02ae5f3972c420ef95a357d5cd127aa7475573f262f69c5fb07a9e21eb5c0fd6207da4936ff02d07672f2575cae40d99516
-
SSDEEP
12288:ru50vlgIOQDU5EIc/6vhZqn3AsfQ3EtQbo+zm3cZGKA2cBKMPUTaLh:4IfEjcCvvqnrt86DK2hd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/qoutation.exe
Files
-
e001c2f271aba2dc061893a0c912a1e6e907deb70aedda58be943dd232342c86.zip
-
qoutation.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 738KB - Virtual size: 737KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ