Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION#008792.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
QUOTATION#008792.exe
Resource
win10v2004-20241007-en
General
-
Target
827e98b504fbb413f8015d78cf5ea7a7105f800d48bb2205993d957591a679a6
-
Size
697KB
-
MD5
340d278f006bf19f78516f920e25b0b1
-
SHA1
4607d19159a2e37437a3770d3d427571fe123e0e
-
SHA256
827e98b504fbb413f8015d78cf5ea7a7105f800d48bb2205993d957591a679a6
-
SHA512
b59aa79a8f74f8b00d8784ee04379c4af97ac055e5da5c714d2c2494c7c5b44ce3dbe812f7ce88ec6be1c10bb93cdf0980db53f816802b42b5dfe91dc0c1eb05
-
SSDEEP
12288:/EpKPTbkGkdfarXpGtF/Zl++EbPvsDx0rwXAE1zWihF7zrqqIat8oVX7p0fy2GB:/EoPsjfmXpGtFfLEbPKx2wXJ1zWi3r/7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QUOTATION#008792.exe
Files
-
827e98b504fbb413f8015d78cf5ea7a7105f800d48bb2205993d957591a679a6.rar
-
QUOTATION#008792.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 751KB - Virtual size: 751KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ