Static task
static1
Behavioral task
behavioral1
Sample
ORDER FOR QUOTE.scr
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ORDER FOR QUOTE.scr
Resource
win10v2004-20240226-en
General
-
Target
ORDER FOR QUOTE.7z
-
Size
604KB
-
MD5
fa5bf6bd66748885d887c4eedda8fed4
-
SHA1
c6619fd6279752c0d8c437deedd1c39a8a341298
-
SHA256
8edc4699e7668102510cba3c96ab0ccfc36417a9c9405a9bfefa1038ce26a5c3
-
SHA512
7ecaf07d9ec383a217900b9e98bf375cb09f166779ebb1baf6a78c021d7397223711a2701e52128452d580507b6d843fb5f910c44d2169b64d6d6452652174e9
-
SSDEEP
12288:oNxfB3hgfIcXFPttwN/KXRcCaRbf5rg6ib/IscLzFfglqNuz:urePXFPtyVKhcCibpF2NKZgwNuz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ORDER FOR QUOTE.scr
Files
-
ORDER FOR QUOTE.7z.7z
-
ORDER FOR QUOTE.scr.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ