Static task
static1
Behavioral task
behavioral1
Sample
NEW ORDER RFQ QUG24-20037.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
NEW ORDER RFQ QUG24-20037.exe
Resource
win10v2004-20240412-en
General
-
Target
NEW ORDER RFQ QUG24-20037.rar
-
Size
639KB
-
MD5
6f3d4c2eb1f84ef7ac7a0aac4aa686a7
-
SHA1
5defd4e28ea03ad9612f80ef2789905cd959f8ab
-
SHA256
c221f5e47f91b5de6ddb5365b6759e113d48c40de422e14068bb7e68bcac508a
-
SHA512
8507d47b3cfa1a832c2f3ff42ae1f608f3674b4554b36d15bf9d6bc61c449f64befcdfa8cc8356a30024ad7bbffe195f25b187ae984a7c96146b34cdae08164a
-
SSDEEP
12288:FSdfdw1gcQpafknTAvRPpEMd59/cR88+Lj/cbbOI7IHD2GkDTysVINVn0rss:FSdFrpQkct5hg88k/4n/nyPL0rss
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NEW ORDER RFQ QUG24-20037.exe
Files
-
NEW ORDER RFQ QUG24-20037.rar.rar
-
NEW ORDER RFQ QUG24-20037.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 681KB - Virtual size: 681KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ