Static task
static1
Behavioral task
behavioral1
Sample
RFQ#46789_24_Anh_Tram_Trading_Material_Prod.exe
Resource
win7-20240220-en
General
-
Target
c681b2758fcd2f7a624fe15f195780e395bb1d9f4ffb4083d0272289ee3ff47d
-
Size
653KB
-
MD5
a0737adff48f422ddd7ef40262a13025
-
SHA1
8e4a7979829caef2e2ac7bcb2a7901a21adb48ad
-
SHA256
c681b2758fcd2f7a624fe15f195780e395bb1d9f4ffb4083d0272289ee3ff47d
-
SHA512
0da60333db8f307cc740dd420039f603571fd2930cb9931d4dd511057573afbcfeb23a759fab2e05619447c023b347098d96874b42830e4a2b5b8779e85cbfc3
-
SSDEEP
12288:/q1ku4cugQJLMyT55Eik1bqEVqq5wkeHYJJDHuQCYdqD7llO5TttE:/q92gQuy/5K5zeyRHGDMxG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RFQ#46789_24_Anh_Tram_Trading_Material_Prod.exe
Files
-
c681b2758fcd2f7a624fe15f195780e395bb1d9f4ffb4083d0272289ee3ff47d.zip
-
RFQ#46789_24_Anh_Tram_Trading_Material_Prod.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ