Static task
static1
Behavioral task
behavioral1
Sample
Quotation.exe
Resource
win7-20241010-en
General
-
Target
299a47a6992010256a82765ce61a0b467e16ff8de59f8f639eae9721f3d7e8b6.zip
-
Size
740KB
-
MD5
be2a7aa61594037a8ed618df30fd0d27
-
SHA1
f6d801bf382423c232c5af27b99f879fd0793111
-
SHA256
299a47a6992010256a82765ce61a0b467e16ff8de59f8f639eae9721f3d7e8b6
-
SHA512
efbcec71ede01727714b90602e4c822f60d25d3d53e0664b40741722d2f0b808489bfd8a787fbe9d6656c32e00e13ad9a174faae3e2ce1cd8394ca0d5ec2341a
-
SSDEEP
12288:12JUDn249lEwMMOSKhiRo2UgBZ+neCGZG6Qy16sR0rBKHUdhnzZWOlG22Mf7lf4N:L249lRe6bUgfweC0lcsyrBKHsNtgPMfe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/Quotation.exe
Files
-
299a47a6992010256a82765ce61a0b467e16ff8de59f8f639eae9721f3d7e8b6.zip.zip
-
Quotation.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 764KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ