Static task
static1
Behavioral task
behavioral1
Sample
RFQ ORDE.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
RFQ ORDE.exe
Resource
win10v2004-20220414-en
General
-
Target
8ba994c442daf0e263b24203bf013eff5d99e1efa9ade9a419c41e3c8f3b00d5
-
Size
1.2MB
-
MD5
26aff259fa685a9dfe4e51e4927a4a0d
-
SHA1
5c510c41adc8c207c65966a7bfe41c972dfd6cca
-
SHA256
8ba994c442daf0e263b24203bf013eff5d99e1efa9ade9a419c41e3c8f3b00d5
-
SHA512
299302dee24101c6c359fd67930467ee83ba4c0afac67742d45fa1b4802a44402f88cba638b52997b3f4b83dcab64962447357afec1c4b3adef0d9849d060cdc
-
SSDEEP
12288:Z/wfUuDfAgPpZnQJTaDcbwm5jwKRdle0:22wdYTaobwmqq
Malware Config
Signatures
Files
-
8ba994c442daf0e263b24203bf013eff5d99e1efa9ade9a419c41e3c8f3b00d5.iso
-
RFQ ORDE.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 422KB - Virtual size: 422KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ