Static task
static1
Behavioral task
behavioral1
Sample
Quotation PDF.bat.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Quotation PDF.bat.exe
Resource
win10v2004-20240419-en
General
-
Target
Quotation PDF.bat.exe
-
Size
659KB
-
MD5
98b8971518202ded11fdcc151ed02557
-
SHA1
25628dc2c0a5d72dc211d927a93ce8b267c1c610
-
SHA256
a689e5f1c8d3a195368dd62cf94953e55abbbb87f75e0363a6d09dfe2bb2bcb9
-
SHA512
f16b2994661ca330c591400d42c899ede141ef3b5c23fb453c7c8dc1abc8265b2113bd4e0ccc7c4a6d729e6ef603df654298ffb502af5a985c980508034234d1
-
SSDEEP
12288:aLbB778QvvMehgHaUJ4h+665eeTUPdphLhPf0bPp75mumu98FkEVZ9LfiN3sTxYj:GbBhMCwip65EVzL5ox7r96DFLfc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Quotation PDF.bat.exe
Files
-
Quotation PDF.bat.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 654KB - Virtual size: 653KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ