Static task
static1
Behavioral task
behavioral1
Sample
RFQ-654J.PDF.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
RFQ-654J.PDF.exe
Resource
win10v2004-20220414-en
General
-
Target
6fdc07b8f99515de29d76b4bd2eaed4189a40424c3220078d9a6107d4d467ca7
-
Size
830KB
-
MD5
1078258fb450d4489063a52c2b998c6d
-
SHA1
9a16fa11f853157c5864a9d495173e36d83ce93c
-
SHA256
6fdc07b8f99515de29d76b4bd2eaed4189a40424c3220078d9a6107d4d467ca7
-
SHA512
14a6e6a282fb7a1a07a8d033e639714fc577f7716dadfe15d4c3eade27f1615984b6d4162515d3a5ddfa4891943f91a17482fe1f0a7aaf5348f6388dc8b6f7d9
-
SSDEEP
24576:q3rvT/j+IVsF3JV2Vaz3gmiAl1dEoDgEzH/PY52U:KVsHAVaUmtE2BU
Malware Config
Signatures
Files
-
6fdc07b8f99515de29d76b4bd2eaed4189a40424c3220078d9a6107d4d467ca7.rar
-
RFQ-654J.PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 850KB - Virtual size: 849KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ