HExzZQ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Quotation FT-QFL-2024-048R REQUIRED FOR Attached Order..exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Quotation FT-QFL-2024-048R REQUIRED FOR Attached Order..exe
Resource
win10v2004-20240730-en
General
-
Target
02082024_0112_01082024_Quotation FT-QFL-2024-048R REQUIRED FOR Attached Order.pdf.z
-
Size
855KB
-
MD5
2d3f88a6a70ceaed17972adde40b971b
-
SHA1
d3514cddcdda66be9fc645a91230c7af44ccee51
-
SHA256
cedb6e478de4e4e4c572b98f5d506fd1c2f758367d6d8dd64f1673259dabe0e4
-
SHA512
ed51230ec56d2bb3fd68bdd88be54ad59cb211348fb36273f06d8c414a431550037b3cfa669a111c3cc5254715cbf687e73227d528709bd467cb19c7c3dd8f58
-
SSDEEP
24576:ZrJEHUo4Naaj9oIxim2lBBJ+HCIdnUgm4y1:ZrmH3wj9oIR2lBL+HCIPPy1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Quotation FT-QFL-2024-048R REQUIRED FOR Attached Order..exe
Files
-
02082024_0112_01082024_Quotation FT-QFL-2024-048R REQUIRED FOR Attached Order.pdf.z.rar
Password: infected
-
Quotation FT-QFL-2024-048R REQUIRED FOR Attached Order..exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 931KB - Virtual size: 930KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ