IoQQ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order Specifications 2024.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Purchase Order Specifications 2024.exe
Resource
win10v2004-20231215-en
General
-
Target
3e39be7dc9401370614c4e62cc56bf9b.bin
-
Size
863KB
-
MD5
520d816a3d37aa3e3ff3af9f4966bb3a
-
SHA1
3b2042d46d0c6b6c23c294839a29b7ae2a152adb
-
SHA256
0faad55fd83ee85790b503eb130fbae6d8ccce43e5306780000399a21a0deba8
-
SHA512
89508785f486e1cee67d1c45a7d0a79587142fc8426d87049adc3a2ced5d66d6c866ecd77d031b77f0c4b5e4f6f838d2843ace108aea9bcf403f2aa098c886f5
-
SSDEEP
24576:rPKMZsoIitzIY1/TvRBP1LCN5B4+98m0F8yDNd9qBePcV:ry6Ii9LrJd1LmNQFTD9qGm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack002/Purchase Order Specifications 2024.bat
Files
-
3e39be7dc9401370614c4e62cc56bf9b.bin.zip
Password: infected
-
fb7e3e941caa92ea4f931356a638868f2e355c65c19cd3c49bd1c00b09a9907b.img.iso
Password: infected
-
Purchase Order Specifications 2024.bat.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 888KB - Virtual size: 888KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ