Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION_DECQTRA071244uPDF.scr
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
QUOTATION_DECQTRA071244uPDF.scr
Resource
win10v2004-20241007-en
General
-
Target
QUOTATION_DECQTRA071244uPDF.scr
-
Size
1.4MB
-
MD5
1a07ab467f5ef0ce3e7733a718538477
-
SHA1
475792452dd61c6dd023159284b6ae9e0f6581ac
-
SHA256
7e2a41007de15f145fd141b8fe26d97be4e3078bc5ae31dce3f7d73a4c330da1
-
SHA512
bc55a5debb917da962a92873797d6421901b10dcc3c75249fadae595cb7db433affc932b87e836ea1b898ce8df0c9e9068a3252eb1d3964100b7d43a574e65df
-
SSDEEP
24576:3v7/cWsAmR+M9o+NK/Jld5NGXO5GuiJIjNZUAloJZRNcdZtO:3brsXR8+NKx/5NGeENJWN6AmJSdz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource QUOTATION_DECQTRA071244uPDF.scr
Files
-
QUOTATION_DECQTRA071244uPDF.scr.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 327KB - Virtual size: 327KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ