Static task
static1
Behavioral task
behavioral1
Sample
Quote Parts/Quote Parts.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Quote Parts/Quote Parts.exe
Resource
win10v2004-20240508-en
General
-
Target
04062024_0152_03062024_Quote Parts.zip
-
Size
625KB
-
MD5
4274a6bd52ec6761e46537dddb53dd38
-
SHA1
f4c2d6ce1305e39046365b03ac806a68bbff3d5d
-
SHA256
0ebb8fde500f89a41864c8f8dd7e926a205c4a0ec3e914e25e5af61208cddc40
-
SHA512
97188fcf2fafaa7aa3b5d0132c3c6fa0537228201205c2273b0451c63294e0ccf5bb1b45195269b8d14edd33747379e93e6d44248dfb174cf34d04511a735680
-
SSDEEP
12288:SJVqSzdcQLcSakWa/CcS00ACwMAB5jYnfvrGRcBQPYNhfBr3O:SJ3ZxVakWlWdRBynfvrGR2NtBr+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Quote Parts/Quote Parts.exe
Files
-
04062024_0152_03062024_Quote Parts.zip.zip
Password: infected
-
Quote Parts/Quote Parts.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ