Static task
static1
Behavioral task
behavioral1
Sample
RFQ#00358-QUANTUM MACH.exe
Resource
win7-20240220-en
General
-
Target
RFQ#00358-QUANTUM MACH.exe
-
Size
2.4MB
-
MD5
f4d943387bf5915c1703a7067befb640
-
SHA1
1c66a240492257e4ee294a2889bf1daf2b44ad01
-
SHA256
c9bc63e8b77037c4faaf0fb5e39689924133d16dedc4dba484b39789462926fe
-
SHA512
a9bacbd2066d3f7f48ba8ab71e6cafab0236cbb3e25d50e47df7eb10a81033400b056475d70c2ca332a8efc736ab374fe71682a9eeb4cf41b86d22166b318321
-
SSDEEP
12288:GB55LGJHP0k6QGixiOM1tuMVFynYjetCnzLAoZ9PpQdH:GdGJHtJLiOM1tZUYZz8on+H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource RFQ#00358-QUANTUM MACH.exe
Files
-
RFQ#00358-QUANTUM MACH.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 209KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ