Static task
static1
Behavioral task
behavioral1
Sample
[RFQ] QuotationOrder (SCS).exe
Resource
win7-20240903-en
General
-
Target
90a2b0df57f56beda8cd5e84ce30297875d045eb45b8b2df8aabdcd1f1031797
-
Size
341KB
-
MD5
41040a6b65a0794b5f2bd59819d4e9a6
-
SHA1
15ffeab6421d06f082242bebc2fd63a723a74876
-
SHA256
90a2b0df57f56beda8cd5e84ce30297875d045eb45b8b2df8aabdcd1f1031797
-
SHA512
29b581e78baaa2ac71d62b05c9c200104963b26cd3842eedd15ea94009b3147ac266ba6dddd944fce7231ba25e061f408c18d9abf4e9e1e67369e3b898963a24
-
SSDEEP
6144:KOK+oIOIJVsn2R0VfQZlFkqG343LWjpgUqz7nnLZ9h3qmhX5Pz:/K+oCJVsnfG6QApA7nt3dhpPz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/[RFQ] QuotationOrder (SCS).exe
Files
-
90a2b0df57f56beda8cd5e84ce30297875d045eb45b8b2df8aabdcd1f1031797.zip
Password: infected
-
5375264f54bb65dec49d6e9d69c871fa12c8a6f6b2712120384a6e00998a649f.rar
-
[RFQ] QuotationOrder (SCS).exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 374KB - Virtual size: 374KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ