Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION_NOVQTRA071244PDF.scr
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
QUOTATION_NOVQTRA071244PDF.scr
Resource
win10v2004-20241007-en
General
-
Target
acdcacda99a817f820fc651d493a3ab1c60b6917f0b7379df764338882ccfca8.z
-
Size
74KB
-
MD5
9ab76dd6b4c3bca866a91bbb66392d78
-
SHA1
c9ca2af352715374ccd2ebb558a22b66b31c74f8
-
SHA256
acdcacda99a817f820fc651d493a3ab1c60b6917f0b7379df764338882ccfca8
-
SHA512
055f8043f1aa78b8f007bc750c63cff9b1f746008b0b6818e9c21aa672582e3b187e0128388dccc16b6d230b706aac634d90bf48fae06bb89cfebdd09bebd246
-
SSDEEP
1536:uUDz0gQfvrqxd/LeOuVDXf/w1cyqfUpIxlo3LAzuWF+BrWt:tufvrsdCbPdfU+xlo7MlQrWt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QUOTATION_NOVQTRA071244PDF.scr
Files
-
acdcacda99a817f820fc651d493a3ab1c60b6917f0b7379df764338882ccfca8.z.lzh
-
QUOTATION_NOVQTRA071244PDF.scr.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ