Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION#008792.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
QUOTATION#008792.exe
Resource
win10v2004-20241007-en
General
-
Target
61163c9d922cb9d4dd2c09f91ba0e4341112c14c162d78eb2b4b5f4017443c94
-
Size
2.5MB
-
MD5
a5a2d2a6d2ace7b37a05752057c8e741
-
SHA1
13f266a6ef6f90630960dedcd7907cb8e99ef2b2
-
SHA256
61163c9d922cb9d4dd2c09f91ba0e4341112c14c162d78eb2b4b5f4017443c94
-
SHA512
27780c872e62eadf0f831161e9c7e6ec4d460f2b1df796921eabedeece43a44947567159d3732a2d6f200c35017a33f56e3829e25937ff2ec7826960bfa525df
-
SSDEEP
49152:0A1G4VWG8kE3SrURfWnF8WJED8JCeTRGTv+WkfFY2z0jIbYOY+CG/SM1ax:0A1G47YSYAnlJEDICeN22zfcOAGv1O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QUOTATION#008792.exe
Files
-
61163c9d922cb9d4dd2c09f91ba0e4341112c14c162d78eb2b4b5f4017443c94.rar
-
QUOTATION#008792.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 751KB - Virtual size: 751KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ