be25cc0ee330f5a544b468e87879d5ab066acb712ad97bf7799fffa56333c7f6
- SHA256 be25cc0ee330f5a544b468e87879d5ab066acb712ad97bf7799fffa56333c7f6
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RFQ – Manufacturing Inquiry.#49160.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
RFQ – Manufacturing Inquiry.#49160.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
General
- Target be25cc0ee330f5a544b468e87879d5ab066acb712ad97bf7799fffa56333c7f6
- Size 1.9MB
- Sample260720-mpt98ae16j
- SHA256 be25cc0ee330f5a544b468e87879d5ab066acb712ad97bf7799fffa56333c7f6
- MD5 24c14d1e493bedf58fd88f3bd2385755
- SHA1 745f25443dca8de96dd0515a4374d2df816bb995
- SHA512 0494b91a12c9e8917f5d01260f7cc1c83fcfc247c5338a638ca12d4a6112b78e6b6bfdf6bdc86dd3f76114ab83d3ce30ce8d2c9ce3671cc18ce9671f898d4087
- SSDEEP 49152:KmAljK7LD6Cu9w/sDoLKhjIWRxx/WHE5m8m0x5mACo9IXLNlf:KxlWD3u9qec6sWT9Vrm0x5mAOXLNlf
- TLSH T17495336AF754C4A5101D50F8D78818C7B661E3A78274DF8FB18E9207B648AED43FBA31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RFQ – Manufacturing Inquiry.#49160.exe
File Explorer
-
be25cc0ee330f5a544b468e87879d5ab066acb712ad97bf7799fffa56333c7f6.zip 1.9MB
-
RFQ – Manufacturing Inquiry.#49160.exe.exe 3.4MB
RFQ – Manufacturing Inquiry.#49160.exe
- IMPHASH ebc247a77b4d4a804b261f97a1fd075c
- SHA256 ae8e7ad14dec25f2ba87cae1510fbba1b46de9d24e967ad92eacc5217301e9c3
- MD5 71ba598a84b31ddcf8d1d6a17b9f9ead
- SHA1 d022f6fc21d37f2f7aa1a47496bdc6a2ac8f7e71
- SHA512 034b6ef9287beb16b76c56805c5fdbe38ba7f1bc68106f93f0924e0f541f33041c9a579bdc64aef5bc6cea18347c673d565ef225520a2d58ecdf068603abf471
- SSDEEP 49152:/8rfBrvf3l2BiNmWlBJ7bIyYzwCBemWY0HvmGCp6DXBTl:/8FrH17UwPY0HvmGZXBTl
- TLSH T159F58D07BCA408E9C0AE9371C9B655963B75BC480B3267EB2B50B6783FB2BD05D79704
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
533472
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
GetProcAddress
LoadLibraryExW
Name
.text
Size
970KB
Virtual Size
970KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
107KB
Virtual Size
404KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
340B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
220KB
Virtual Size
219KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
387KB
Virtual Size
387KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
172KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/95
Size
87KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/112
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
168KB
Virtual Size
167KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ