Static task
static1
Behavioral task
behavioral1
Sample
Gcerti Quote.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Gcerti Quote.exe
Resource
win10v2004-20240226-en
General
-
Target
76f3349e9436ac839a2a1891f023bcb2.bin
-
Size
644KB
-
MD5
5af89c74d0a78b8ef4fa775880763738
-
SHA1
598768db8f86b6aaf797becd4c0992613caf362e
-
SHA256
88445121c8dc68b95e4d6a1070bbfc7055f046ed253a6448831ce988c5a77b97
-
SHA512
b025cecf516eddb37e342f565b0b880f7094b6d60f69a82208affb9036d832f32e9c619989bf8f112b0a80ef36eb00cd1acf91b0e4549010cb7658d37ca23f95
-
SSDEEP
12288:If87i0pp8AOg9BsXRtVxCqi0mhe9Oxf61k3mYe7lq9vlFI:IEW00A3BgVxCqi6iPe7QhI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Gcerti Quote.exe
Files
-
76f3349e9436ac839a2a1891f023bcb2.bin.zip
Password: infected
-
b4a28403c7dd90741d3560d8a4b6b40dee0a58bdac54409c341eb3e882e518f6.zip.zip
Password: infected
-
Gcerti Quote.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 678KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ