Static task
static1
Behavioral task
behavioral1
Sample
REF NEW KSA-DUBAI PROJECT RFQ DETAILS #5688QM-988765RQ-ESPRIUS-DES-MWQTR.exe
Resource
win7-20231201-en
General
-
Target
REF NEW KSA-DUBAI PROJECT RFQ DETAILS #5688QM-988765RQ-ESPRIUS-DES-MWQTR.GZ.gz
-
Size
625KB
-
MD5
7f7acd9a355968e6cd33921f60369cef
-
SHA1
9ec8a58ff97e26502b8db5158fd33cfce1eeb1b6
-
SHA256
0bc822fb5d16d0228a49d3707b6defb41a4bca98d20120588c07f83f8b3154f7
-
SHA512
4ab3543b17870fcd0f141ea2ffd23209d7e95a6200ba2d9961f2c03537a216ea566d50125483a3005e2f9967bc6021befec67ba23dac5cc00ca95c06537c1b0f
-
SSDEEP
12288:hygarQqFn8bIh8Ik4muEOaXMSgKcXOfSTho8ko4Oj87IN94wDbUX:g9rXF8Ik4muEJDgK89+DOjIIN94CY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/REF NEW KSA-DUBAI PROJECT RFQ DETAILS #5688QM-988765RQ-ESPRIUS-DES-MWQTR.exe
Files
-
REF NEW KSA-DUBAI PROJECT RFQ DETAILS #5688QM-988765RQ-ESPRIUS-DES-MWQTR.GZ.gz.rar
-
REF NEW KSA-DUBAI PROJECT RFQ DETAILS #5688QM-988765RQ-ESPRIUS-DES-MWQTR.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 634KB - Virtual size: 634KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ