Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION_AUGQTRA071244PDF.scr
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
QUOTATION_AUGQTRA071244PDF.scr
Resource
win10v2004-20240730-en
General
-
Target
4.lha
-
Size
127KB
-
MD5
62f15e765b55b1512ec981e2dd495748
-
SHA1
4d297caeb19124fa5f1a4f4bb1e8ed7ebc65446d
-
SHA256
1db498a726beb9737a39728af42b6ce1065805a9e9eb5ffefe51ad1e26de1f15
-
SHA512
60c5935bd51d06f496a19c2b97e65fb110a90b76a23c881618efde13310e36155eea75edce6cdd665c0b696660d36f792267a2a23edffb78ed4aac22cadc9e62
-
SSDEEP
3072:BJizkOR/5Jyi6IKoOgLzNcsmvW05V5VjXbmHwMI2BP21:XioC5J96BoOgL5q35RUwD2Y1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QUOTATION_AUGQTRA071244PDF.scr
Files
-
4.lha.lzh
-
QUOTATION_AUGQTRA071244PDF.scr.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 209KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ