Static task
static1
Behavioral task
behavioral1
Sample
RFQ678903423_PROD_INQUIRY_SHANG_NOG_INDUSTRY.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
RFQ678903423_PROD_INQUIRY_SHANG_NOG_INDUSTRY.exe
Resource
win10v2004-20240419-en
General
-
Target
RFQ678903423_PROD_INQUIRY_SHANG_NOG_INDUSTRY.exe
-
Size
673KB
-
MD5
e184c8b191b12744e919b3b95ce39a0e
-
SHA1
fe25931e12b1f5807b95cf222cd9ee74c2cb7ea2
-
SHA256
df9e900bc2aba3462d0b9d2fb4e81719604f4c63871a2225edce136c140e8fc8
-
SHA512
8df2bb22f07eb282247d5b98d627fc5cf8d5ac9958304c43a8916eb4ef2ecf9627ad753c07206576e9550672e57581767dcb0b1cf140bc7f2f76bdef37a89719
-
SSDEEP
12288:A5rkOKFLWcw4n3BzGC9t1SJFrg632LvRpVR09BQoq:ckOKFiX4xy6c86G7BR09B3q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RFQ678903423_PROD_INQUIRY_SHANG_NOG_INDUSTRY.exe
Files
-
RFQ678903423_PROD_INQUIRY_SHANG_NOG_INDUSTRY.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ