Static task
static1
Behavioral task
behavioral1
Sample
rQuotation.exe
Resource
win7-20240705-en
General
-
Target
rQuotation.exe
-
Size
2.8MB
-
MD5
3553ed5ead976c6dbae1b70efe14ead5
-
SHA1
ba10e8c0064380c0b9eab485bde7f3fbca062cb3
-
SHA256
bee4f8f83d7ec218bfb42904a7a15115f585c06930c5df8485891d0ab2b34d42
-
SHA512
8c873eb6562d00e53175c5bb232735633b7288c2f966a83da6b58e6ebeb792bb145155aeea5777910130efbdfbc55ffebcab778e02bb7d3348e620bac99b5860
-
SSDEEP
24576:RuDZjhKIiNtlGct8xkFEEJ5bLDXLp8mAPnmc1:RuHEJmIEwv8mAPmY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rQuotation.exe
Files
-
rQuotation.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ