Static task
static1
Behavioral task
behavioral1
Sample
RFQ EO-230807.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
RFQ EO-230807.exe
Resource
win10v2004-20231215-en
General
-
Target
d2643d09c214aba8c6dbe54277de6a73.bin
-
Size
663KB
-
MD5
6eeac74a8b4d983d4cbe66735a783494
-
SHA1
f44e5d4b2467afdaab50bd87299b323bf9fa776e
-
SHA256
6e620a3c9961eeae50be62427a7a5151a4d8089c4cc0d81bbcdf8e053723ac17
-
SHA512
acfc727636fd592a2b3722660d93ee3dd08baf4b598400ecc511e883d5631eea4fe484161a9b1fb5c4778d183c5a247d21a374720dd42a8a698a06b9f2ca6795
-
SSDEEP
12288:GETOxjG16XdX1hgLq9cpf/htBxT7jOUuFpYp+t:tqxa16XtkE8f/htP/uFmc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/RFQ EO-230807.exe
Files
-
d2643d09c214aba8c6dbe54277de6a73.bin.zip
Password: infected
-
4baeb332684401a63cc8af4b4646c65798d91d360a6eb483c398aaaf5eb79c1a.zip.zip
Password: infected
-
RFQ EO-230807.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 753KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ