Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION REQUIRD.exe
Resource
win7-20240221-en
General
-
Target
571a0c88df4b124cb02a0107fc02896c.bin
-
Size
19KB
-
MD5
b2727e010799b6538feb293148d5059b
-
SHA1
aa726f37e2c956827327fde559a61ab749628b8e
-
SHA256
c9b89122729d30cbd1dcdbfd7c0a82cc09d9fe65671856307e3c5405fe4ab5f0
-
SHA512
eb6fd51f87629757dfc49260f0d678ab50d6c9a6e08593dc1e0f115072361bda9477780a82c348186aa67599e05875da9c6cc10af4d4c1bb6265813dd95da62f
-
SSDEEP
384:M3U2Z1DGuSUfMbUwu5/ujhY7U2bT0T2yaFwYipu/BiLdGwC/F:YU2rDGuDeqDU2bT0T2yS7ipgipGwCN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/QUOTATION REQUIRD.exe
Files
-
571a0c88df4b124cb02a0107fc02896c.bin.zip
Password: infected
-
03a23b591496c1e4e2541839975c67874ffb1ba515b1ebb13af225d668759989.ace.rar
Password: infected
-
QUOTATION REQUIRD.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ