Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION REQUEST-77464563548764577.exe
Resource
win7-20241010-en
General
-
Target
97874f538c7efcaa39304fe2b46d8e7af3fcda24d831a0c55f5fb4421c2ecf8d
-
Size
365KB
-
MD5
07d2ecfaf0b8d5a6a19d3983768bc18c
-
SHA1
f7ce18f18e43654d08cdae296f481f7f012f3c43
-
SHA256
97874f538c7efcaa39304fe2b46d8e7af3fcda24d831a0c55f5fb4421c2ecf8d
-
SHA512
235dd38ab7a8a46af2a9c591df5ce4619983fb78a4edee28bc04372017afa6fd2f5457ba6589913a7e3747f7f67cf20365ba5cecb1eebc2e065dd40697b40db2
-
SSDEEP
6144:UyeSSU20AC4NCdtXnKHOviYR3/3N/JjvJEnKwa6OrF:7e5U2pC4+1H11/3N/JjAra6OJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/QUOTATION REQUEST-77464563548764577.exe
Files
-
97874f538c7efcaa39304fe2b46d8e7af3fcda24d831a0c55f5fb4421c2ecf8d.zip
Password: infected
-
QUOTATION REQUEST-77464563548764577.r09.rar
-
QUOTATION REQUEST-77464563548764577.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 456KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ