Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION_NOVQTRA071244úPDF.scr
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
QUOTATION_NOVQTRA071244úPDF.scr
Resource
win10v2004-20241007-en
General
-
Target
QUOTATION_NOVQTRA071244úPDF.scr
-
Size
1.2MB
-
MD5
9cb11cf0e358d8b07765cb9b3830ec84
-
SHA1
934d2ff4aae74a15c211bfbec2d912a0b6da130a
-
SHA256
259768c3fda8c71024d9e77d8ebf98ac72b5dfd672cf1d93161c724ea256e83a
-
SHA512
ff53714e9dc388b0f75c0d10a6038bdd7ff7577c2564976d8b2a421f8d18ecbf87814457ee4d3f8e88921af80327380b0524d1285d78346ff38f98c32acb412e
-
SSDEEP
24576:7zfPC682UBvyVFA3rx+ppyDW8XxgGzfi6F3DY:HbQtxQaxfi6F3E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource QUOTATION_NOVQTRA071244úPDF.scr
Files
-
QUOTATION_NOVQTRA071244úPDF.scr.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ