Static task
static1
Behavioral task
behavioral1
Sample
Product Requirement.exe
Behavioral task
behavioral2
Sample
Product Requirement.exe
General
-
Target
621fb9ff8d5365522b75309e9f2fa350eb602421e5b82f4c79a8466972cb87a9.rar
-
Size
604KB
-
MD5
1bc6d83529f5b307fbfa460412c6cf99
-
SHA1
f38ecd611ae8e3ae9d070171adbe9f60e7f2d4bb
-
SHA256
621fb9ff8d5365522b75309e9f2fa350eb602421e5b82f4c79a8466972cb87a9
-
SHA512
c26f3616c7f623e477edf8c6d980fd01f221a1d68903ff333397e3446d621e46ade274f6d6b050beeed8de1c25365bfb849c1be894cb6645ddd2ed4528333cf9
-
SSDEEP
12288:QaDlK0Gczo8v//XyrEW3sSXKrsZaBgjJaQObpi:Q2Jbo83/XyrEW39KrSwti
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Product Requirement.exe
Files
-
621fb9ff8d5365522b75309e9f2fa350eb602421e5b82f4c79a8466972cb87a9.rar.rar
-
Quotation Request For Atlanta Post Cap.iso.iso
-
Product Requirement.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ