eCop.pdb
Static task
static1
Behavioral task
behavioral1
Sample
RFQ REF-JTCAJC-QINHP5-TIS-L0009- AL DHAFRA AL JABER - SUPPLY.exe
Resource
win7-20241010-en
General
-
Target
RFQ REF-JTCAJC-QINHP5-TIS-L0009- AL DHAFRA AL JABER - SUPPLY.exe
-
Size
586KB
-
MD5
b8a2fa19e2418d7cb6c857ced026585e
-
SHA1
78e8aad0b3f3caf3058be5caed838fdb1764d233
-
SHA256
089d8381834066449bcd52d04db467353e195fe84745a8d2587bacf93802a706
-
SHA512
1f9525d6bac0c733af02983dcd1d02ad8acefef0d8e159aff498c250ae7e688baf552810e21a04136d7fb8243d8ffefcb493649845f7d9a1880f768be30cbdd1
-
SSDEEP
12288:vRQ9/s0yg2xIBqfmlnT9G5OmLVJ8MjRaEUuyZHYqEQTd1jCoBbBdr3GF8:mqmlnJGEmhHoEQZ1GoBF1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RFQ REF-JTCAJC-QINHP5-TIS-L0009- AL DHAFRA AL JABER - SUPPLY.exe
Files
-
RFQ REF-JTCAJC-QINHP5-TIS-L0009- AL DHAFRA AL JABER - SUPPLY.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 583KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ