Static task
static1
Behavioral task
behavioral1
Sample
Quotation 419617029041.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Quotation 419617029041.exe
Resource
win10v2004-20240611-en
General
-
Target
Quotation 419617029041.exe
-
Size
677KB
-
MD5
43a5b37164dc21f185d2851ad12f1a26
-
SHA1
824bf2707d42b520ca9f9144de1391d9fc8b87b4
-
SHA256
eaa7efa0baa6e8601b569a5c27c19750bdb161fcb2427162b9f1c284b1d8166e
-
SHA512
7393b37b88cb7b98df7b79a1cd8ef965b15f628207aa551106e26ba1f078412ad08f7bdcb0fa842fbf8364715b760b048be7f27666c0e6ed090daf947a1a562c
-
SSDEEP
12288:NveFkXbCawi3EiHlr7NhQUur2Ber7szAtyrGOj8yM+p9zhgh2/+blsUhKwtiCMvn:jwiUUr7fuIAvyrGOYyrp9z81lxcDfA47
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Quotation 419617029041.exe
Files
-
Quotation 419617029041.exe.exe windows:4 windows x64 arch:x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 674KB - Virtual size: 674KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ