Quots-875-765-pdf.rar
- SHA256 ba7c0c9e14071e1bff1e5ea34663e7a735a40c325e87eff12eecdd75d701ded3
Password
1234
Static task
static1
General
- Target Quots-875-765-pdf.rar
- Size 1004KB
- Sample240904-ecq32avaml
- SHA256 ba7c0c9e14071e1bff1e5ea34663e7a735a40c325e87eff12eecdd75d701ded3
- MD5 0f0a5edbaa71cf23797b570885b59f82
- SHA1 a61fff12d5f645245d2ca5495ca95de9f0eca95c
- SHA512 77d3aeaee25fdf0291ca1d866580ed3f4a1ed46efdb374790e9f0407c75df66b384ffb05804f6bd77f4a6d5ac09c4c359399d399774e8e587c17358187e8ffdf
- SSDEEP 24576:exf7s4lgPY9xryNgo9NW60Wv+RXoFeT7z6uK1gGzjRe:uY4iqx2N9W6GTfwgee
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
Quots-875-765-pdf.rar.rar 1004KB
-
Quots-875-765-pdf.exe.exe 1.2MB
-
Labourhoods.Mas51KB
-
Monoerne.Ple342KB
-
discontiguous.alk783KB
-
genfortl.kom922KB
-
leucocythaemia.lob940KB
-
teknonom.txt258B
Quots-875-765-pdf.exe
- IMPHASH 7ed0d71376e55d58ab36dc7d3ffda898
- SHA256 f7f089f7f7753da939649fe98a4d274e44b837a61b72d022897858e1998cc7c4
- MD5 a4c6a296a5b55a2858c0343d2c44490b
- SHA1 01c57919f82cf0ec9683540735141302032ac070
- SHA512 0bd26eb1250c24b3b0ea5938c17d71dcf9b7467fc85588e8b13978e8d06aaa6e34dd276ebb67c4455e2a8db4458d487c8bde54c7a0cf4bed2e54a323194ef13f
- SSDEEP 24576:PZbqxGFMhCGa7cQPHpk060aci6V20XH83oD1dEUu28KkzFu7biF8:RbqxGFMhCGa7cQkJciMvMXLFgbi2
- MD5 SHA1 SHA512 SSDEEP
Password
1234
PE Signature issue
Digest
74:06:20:0c:d8:b1:f2:0f:e1:05:8a:33:45:30:d3:21:ca:0d:18:7b:07:01:d3:9f:9d:3e:b7:c4:c4:f9:74:84
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Slettetilladelser Fishtailed Unindividualized\ ,O=Oversigtsartiklens,L=Luplanté,ST=Centre-Val de Loire,C=FR
Chains
Aug 22, 2024
Subject
CN=Slettetilladelser Fishtailed Unindividualized\ ,O=Oversigtsartiklens,L=Luplanté,ST=Centre-Val de Loire,C=FR
Serial Number
26:2d:85:9c:ca:be:23:37:5d:c2:f1:d9:3f:39:63:de:75:11:76:35
Issuer
CN=Slettetilladelser Fishtailed Unindividualized\ ,O=Oversigtsartiklens,L=Luplanté,ST=Centre-Val de Loire,C=FR
Timespan
Jan 18, 2024 - Jan 17, 2027
Minor OS version
0
Major OS version
4
Entry point
12799
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathW
SetFileTime
CloseHandle
GetShortPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
GetFullPathNameW
CreateDirectoryW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
SetFileAttributesW
ExpandEnvironmentStringsW
LoadLibraryW
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
CreateProcessW
RemoveDirectoryW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcpyA
lstrcpyW
lstrcatW
GetSystemDirectoryW
GetVersion
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetModuleHandleW
lstrcmpiW
lstrcmpW
WaitForSingleObject
GlobalFree
GlobalAlloc
LoadLibraryExW
GetExitCodeProcess
FreeLibrary
WritePrivateProfileStringW
SetErrorMode
GetCommandLineW
GetPrivateProfileStringW
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
MulDiv
MultiByteToWideChar
WriteFile
lstrlenA
WideCharToMultiByte
user32
EndDialog
ScreenToClient
GetWindowRect
RegisterClassW
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
wsprintfW
CreateWindowExW
SystemParametersInfoW
AppendMenuW
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
GetDC
SetWindowLongW
LoadImageW
SendMessageTimeoutW
FindWindowExW
EmptyClipboard
OpenClipboard
TrackPopupMenu
EndPaint
ShowWindow
GetDlgItem
IsWindow
SetForegroundWindow
gdi32
SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
advapi32
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
ole32
CoCreateInstance
CoTaskMemFree
OleInitialize
OleUninitialize
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
148KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
424KB
Virtual Size
423KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=166, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Labourhoods.Mas
- SHA256 f3b691cb8a7d661732bdd82f35cbe5cc2ed99fedc6992646803e871d221e9e37
- MD5 edef981795fb6272025d069c64f98d9e
- SHA1 665b7096bbd7c215bcf9c22e08e4148ae1eb7f9d
- SHA512 eff41508448d5949e79a3fa951006d28fe822364a72029f59e5f493cd9c59252dc02116c4777aeb5a2e389c075c43651e6198b713239f69f692c89aaa7ade583
- SSDEEP 768:XfCnt++aHtX6H3zHL2DsCWwDylncqlb3z2zIEDCa0Th9vgCVJB7EScdndj8djdbP:XtY3n2DHDylnUznT+DVTxcZuu9CHZ
- MD5 SHA1 SHA512 SSDEEP
Monoerne.Ple
- SHA256 08ddca57d81a3aa14a1ec07e0beede85bfb8104014d67cc8a2332be5a091abcb
- MD5 b75ebbcb5d2f614b0a9e050c93cdb838
- SHA1 0ca8fd75e51890798ae01761532627d46c89ddd5
- SHA512 76fb2fde501d5d89edf279796f0ae6ef8f88dd42e07e759614f49008a46639ad848df3db5acc4e9ebd2002a7e02b6303935871a0d66f351d293229ecb4ab5371
- SSDEEP 6144:wFq1zBA3AXx1MQaZvQRpV924hMjJ2Zb4ailt8u4jF6u56uyp02peLHTZ5c:wFq1zBAw/MQaUpV92cQO8t/wFZb2YF5c
- MD5 SHA1 SHA512 SSDEEP
discontiguous.alk
- SHA256 84dfba8a9b3f62629795fa225c836fdcd3708595325e98f6248e3c72a4dd6c9b
- MD5 176ba5de5fe97864b7468dd8bce8c38e
- SHA1 01804c24edc45329980bf040fcf8efffaf4b471d
- SHA512 ec9e44da08d30fc5241bb06792127530993b038a1b0c20a546241ead3663afcfd2e4c02f73465a0723e1d9e7df10fcb6c19888776911c49f646abf6eb5e70254
- SSDEEP 1536:NKhLrR2iZCjGIP8dRVIVuLWjmO7fg7RKVFw+UPDsVTWD04FMUtdmTWO5XQc/G9vp:URN2sRoTzFB6D046UOPJu9vvio
- MD5 SHA1 SHA512 SSDEEP
genfortl.kom
- SHA256 6a76541ee87e4e7e547f500d01cc9d50ee681dbf067fe8d4e5735f5bd22ac999
- MD5 1cb1238607e8954a7923966a49cdb3e0
- SHA1 bff6a1e896bb0be28e1bfcfd0094bcd36078d849
- SHA512 4b691c9c24c15da18b9c3f221333692f1ca364b96765ae94ec01fd2bf004449a57dde3e6e89b8a567da2fc05f53ba7fba853ac8b367f298a1c444ccc5f3dae5f
- SSDEEP 1536:UyGaAJZQVIsL4WNkRjeGXJIp9Oc52NVuN75fZTD5p1v5E1bkGgMF/3tDLREMUPS+:UyGxUL4a6vXJIWhru791ublLeDPS0ASD
- MD5 SHA1 SHA512 SSDEEP
leucocythaemia.lob
- SHA256 254a5a9b8b3f20a38a993c62d3f16ee3f7d98176769f97c58248c27c77a4c032
- MD5 5318799c0891e41c4824b117782d972c
- SHA1 b7708ecd85a69e6158ea05a6b5bdc1b8ce826199
- SHA512 9aa1b82b35c17d11b57749b399f4280f2d2fd111aa8523e1fa7cb82dbac3a968f3cbe09310b4a592550517cc10f2edce63f919ae1399fd8160d55b0a8e65866e
- SSDEEP 3072:3wRHrOD/R6APMwv2g5tvYRY0zgsRVL7YapsU7:3KHri/3P20wRB8CYE77
- MD5 SHA1 SHA512 SSDEEP
teknonom.txt
- SHA256 c03bc7edd150c4dc8a88f160d8863489f09aacee6f9ce5071e0d962332522a6c
- MD5 17eacc32277ac454b9e9981f5e3ea80b
- SHA1 6d18f25a482b59ab8ac0d485d9594a147320b396
- SHA512 2854ae7b957d8dd01436db85587e61b348990452e546785c907a50ce0253338caa1ca268800426243b35c11bdaa32cfc8115a1fc8f4e9081b8da36822cd107a7
- MD5 SHA1 SHA512