Static task
static1
Behavioral task
behavioral1
Sample
Quotation.exe
Resource
win7-20240729-en
General
-
Target
8f1c4815ebd89c9e400cbd552d7451c5420e5e2618c507163aebf0e8cede33fc
-
Size
832KB
-
MD5
1acb4ef38316c27ab0b749bcb9bb2ba5
-
SHA1
3e4f1f91c17d63059afb7b9821de0f1bb1961a2f
-
SHA256
8f1c4815ebd89c9e400cbd552d7451c5420e5e2618c507163aebf0e8cede33fc
-
SHA512
0d97a4f5f62cbad53c842265582f3758702b7e2593287d68afe1894f1953003642b2e9387124d5f8863ce7b4ce6ba3ef36fb1e5d3fa9555e1404a505f0a3fa10
-
SSDEEP
24576:VS530j7VARrRGyEDD5afzdgsqwd88w132BIKSxt:VxVhNa7/rY2uKSP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/Quotation.exe
Files
-
8f1c4815ebd89c9e400cbd552d7451c5420e5e2618c507163aebf0e8cede33fc.rar
-
Quotation.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ