Static task
static1
Behavioral task
behavioral1
Sample
QUOTE-PDF/QUOTE-PDF.exe
Resource
win7-20240215-en
General
-
Target
03062024_0347_31052024_QUOTE-PDF.7z
-
Size
833KB
-
MD5
26aa44a1e0d51242a24c7249d3612230
-
SHA1
f12bb3797f6c834e1ab69a69dbec3ba78d8b6c93
-
SHA256
78ab7cb2c906487fa0366a09cefe809f4053c49fc6df6326a1c61663cfd806ca
-
SHA512
21670eb7b080a889538fdc5a311c667f7d844f258e01a82bc4de985003835827facc24d348bc84ad31004ba4e2233f5d54fb6b26c0d36336387f19d5cad08257
-
SSDEEP
24576:VyokQXCyoKPSse1+ndMl4rafAaTLpSxSkq+YRGw:VXFxx9eedwUnaYrq6w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QUOTE-PDF/QUOTE-PDF.exe
Files
-
03062024_0347_31052024_QUOTE-PDF.7z.7z
Password: infected
-
QUOTE-PDF/QUOTE-PDF.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ