Static task
static1
Behavioral task
behavioral1
Sample
RFQ 502480987.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
RFQ 502480987.exe
Resource
win10v2004-20220414-en
General
-
Target
52977c9b9eab04abbbf62bfb18501cf1df4d817e535705d2b7c3d7f8e963f19c
-
Size
444KB
-
MD5
f25f6c2612938328af982cc769f663ca
-
SHA1
285b22510f4ab97cf6684749d8f81cf6c0bdf168
-
SHA256
52977c9b9eab04abbbf62bfb18501cf1df4d817e535705d2b7c3d7f8e963f19c
-
SHA512
125d10776b582eb4f3ca84b703ffadf7d408703e591e399196278244a8b5a54ab9ca5a44145fcff0501a915cb0ce2a571b529a88b7401f45075e65aa6f6a68ce
-
SSDEEP
12288:o4nhBSMyBHLTkvBaW9vX1NvyCRmrynNM9E:o4hBKnkZaE/jvDRmrF9E
Malware Config
Signatures
Files
-
52977c9b9eab04abbbf62bfb18501cf1df4d817e535705d2b7c3d7f8e963f19c.gz
-
RFQ 502480987.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 547KB - Virtual size: 546KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ