Static task
static1
Behavioral task
behavioral1
Sample
Quote 40240333-REV2.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Quote 40240333-REV2.exe
Resource
win10v2004-20241007-en
General
-
Target
20112024_1630_20112024_Quote 40240333-REV2.rar
-
Size
671KB
-
MD5
71dc25a90e3578c4308abfcab67adfd8
-
SHA1
79a824409e6a134b16c778a8abaa53449d989ef2
-
SHA256
449c4a635102036e1140df4d331e3af2425dc4f5459e1cd8308441e49632ce99
-
SHA512
e3a1171b144a16b327ed11f3e8f13fba7624d02d42f083ff2213db11a589c5f235c90699c5e3cd95dd8c9e40b7de72334f7ff5e8c26008024b29829f3c6592cb
-
SSDEEP
12288:bjufxq7LFYek0ILZVMIqg3ET6rSL2LwO5ojywYtDWXAYUUfqVNDgK7HN2Ncxx:bjqxk3ILZVM76EmeOwYkUUfqVNDgK7HF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/Quote 40240333-REV2.exe
Files
-
20112024_1630_20112024_Quote 40240333-REV2.rar.rar
Password: infected
-
Quote 40240333-REV2.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 694KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ