Static task
static1
Behavioral task
behavioral1
Sample
Our Inquiry_RFQ Details_Heap lee chan Trading_Pdf.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Our Inquiry_RFQ Details_Heap lee chan Trading_Pdf.exe
Resource
win10v2004-20231130-en
General
-
Target
02be2ba38f47bf58b12515c739d36d435783687e9fc5d5933043bcc2481064c3
-
Size
1.2MB
-
MD5
24ea839175f2a4b5fd4779000b869421
-
SHA1
757c623bc09b2f57b9e5b6b58bfc40c6e9645f31
-
SHA256
02be2ba38f47bf58b12515c739d36d435783687e9fc5d5933043bcc2481064c3
-
SHA512
42d7040057384c40b9aee75ca689d18367e0e983316bf6ba0138d03e62994d6f452bb6abe1c9f0cffac04c82dcebc7cf06ee08440ac0bf29ecc2aa7115611a6c
-
SSDEEP
96:5AT6dh/TUJQHQ7RqdYt7lrZIjG6DSfA/dgwo/pf8Bhrt0ozNt:aT5OQRz7ZZI9Sf8gw+pUfrKq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Our Inquiry_RFQ Details_Heap lee chan Trading_Pdf.bat
Files
-
02be2ba38f47bf58b12515c739d36d435783687e9fc5d5933043bcc2481064c3.iso
-
out.iso.iso
-
Our Inquiry_RFQ Details_Heap lee chan Trading_Pdf.bat.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ