Static task
static1
Behavioral task
behavioral1
Sample
New_PO #1783919…22 RFQ Amended.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
New_PO #1783919…22 RFQ Amended.exe
Resource
win10v2004-20240226-en
General
-
Target
b4482bf455efe7ffcc19b8bf1aadf052.bin
-
Size
618KB
-
MD5
39edd5d6e44202641f13bbf77985619a
-
SHA1
3de58c8cfc136dd52d31f763700cb07ec60b8474
-
SHA256
b83d422945514f51d22148aec224b34221cd7d11e78a60e64402baa629748005
-
SHA512
3c0036527b2193a3e226990ddc437a76e15a9ece19cc2ab4b89967a1ca0a512df0dce3b89736c15cfd5ea7196f560baaf8937fc05baf33d7de77351b6165d1a9
-
SSDEEP
12288:ErFr8ym2qnegVD/KVUKmKo/JhfnsGc9kyOOUR0G+m:ErF4ym5vD4mKMpc9Gpxt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/New_PO #1783919…22 RFQ Amended.exe
Files
-
b4482bf455efe7ffcc19b8bf1aadf052.bin.zip
Password: infected
-
534d3e3464fe4b9cd4382189435b14f5c446890d7a4779a49bdabaa01cacfca2.r00.rar
Password: infected
-
New_PO #1783919…22 RFQ Amended.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 630KB - Virtual size: 629KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ