Static task
static1
Behavioral task
behavioral1
Sample
Quotation.exe
Resource
win7-20240708-en
General
-
Target
aef26306d4795b684b50bf96ad874f9199c0ff8bd4698315b2fc341218dc66fb.r00
-
Size
744KB
-
MD5
676b8a352a266a21bb919399997cc2eb
-
SHA1
5d2700717ed7902f91c3719c8bc25f9edf48ed4a
-
SHA256
aef26306d4795b684b50bf96ad874f9199c0ff8bd4698315b2fc341218dc66fb
-
SHA512
6b2d2a6d630128d8fc8ccdc268df1c92bd65c4c6a0e255749ef4e98734f3be77e78a0c9fd8f21a8be1a675ea1f3b62aca4a08d7bccde72c896341c566020d63f
-
SSDEEP
12288:+/s5UJiqhFJYuMuvgubo3fGhrFBBTvrRb+uAsKb658c+Gu0dRRXqVKNTQYvgY:+/GU5J37bQOh9lhAss658GPUOTXvJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Quotation.bat
Files
-
aef26306d4795b684b50bf96ad874f9199c0ff8bd4698315b2fc341218dc66fb.r00.rar
-
Quotation.bat.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 817KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ