Static task
static1
Behavioral task
behavioral1
Sample
RFQ_PO_048657697_MQ10384_Order.scr
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
RFQ_PO_048657697_MQ10384_Order.scr
Resource
win10v2004-20250217-en
General
-
Target
a05510224a29e7f28470ab24a48ee1d5a5e5b2242360bda7ce96ddc75fd88650
-
Size
800KB
-
MD5
3b67ce88ac137f4b2c767f2fc6278511
-
SHA1
994e62f6ba7c40327973543a77b0636ea8e3e6e9
-
SHA256
a05510224a29e7f28470ab24a48ee1d5a5e5b2242360bda7ce96ddc75fd88650
-
SHA512
3f714db76219d6493dfa989205ffee7f3c64d66f37543724f191a79fd20a6b354c257fd9ab64e1966984da723f9bcfebc97408e53c730348c2d6124eb988eca7
-
SSDEEP
24576:vFg7rMzz+mkUjunHyfX9ru9zqWEPYafaB4qgEUbaU3YW3:tg7rsz+5LSJSqWEPH5aUoK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RFQ_PO_048657697_MQ10384_Order.scr
Files
-
a05510224a29e7f28470ab24a48ee1d5a5e5b2242360bda7ce96ddc75fd88650.zip
-
RFQ_PO_048657697_MQ10384_Order.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 870KB - Virtual size: 870KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ