Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION_SEPQTRA071244PDF.scr
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
QUOTATION_SEPQTRA071244PDF.scr
Resource
win10v2004-20240910-en
General
-
Target
25092024050624092024Ordendecompra.P7696.z
-
Size
52KB
-
MD5
b49eafe82db93616fd1475225131df3c
-
SHA1
2751fa9d6b11e2fb36864da71da8399cab435782
-
SHA256
aab70901013847089e10888514b8c7673849cd612822a5321398e58f8a0b6981
-
SHA512
8474e722569952a95335baadc8886df426051955d42d1e891b5ab104668fc74c7767d8a789ef6e148cc6e2d433dee8162673d9043496e797503cd8f759de85cd
-
SSDEEP
1536:x9HCTpYSfULAckUbqLxIcTHmTkBfPONz0Uf:x9/dCxIcTHRONzL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QUOTATION_SEPQTRA071244PDF.scr
Files
-
25092024050624092024Ordendecompra.P7696.z.lzh
-
QUOTATION_SEPQTRA071244PDF.scr.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 327KB - Virtual size: 327KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ