Static task
static1
Behavioral task
behavioral1
Sample
RFQ 9-18-2020-docx.r00.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
RFQ 9-18-2020-docx.r00.exe
Resource
win10v2004-20220812-en
General
-
Target
141812f77bdef659d1bc5c1403c5e094.zip
-
Size
394KB
-
MD5
61c7faa7c8770701ff2c6f02e0dc3300
-
SHA1
bcfbf62fc9e9cc8dff54bd0683f5195736d2f0bd
-
SHA256
f04efc649589c640d0c0f9688b806d65469a61a13047f8247e4a222a3aaf77a5
-
SHA512
f7f2691ef626e5a8929209d6b82295e3e967de3f130cec4f77ff0398e8bf4c23095d46fccbf8a473336d5d25530ff17170af678df64b5551a13a9a17e1919ac4
-
SSDEEP
6144:qi0YZ0MtwGbQ0ZU/OCyqR7yZP+qpGUfvT9oAiwxqmDpSuZMquNDp3x1eFPkaMm6x:t0Gvo/H1UWQNSX7DpzZaM9Pvb
Malware Config
Signatures
Files
-
141812f77bdef659d1bc5c1403c5e094.zip.zip
Password: infected
-
RFQ 9-18-2020-docx.r00.bin.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 569KB - Virtual size: 569KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ