RFQ-38541[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ-38541.exe
Size

953KB
MD5

443a7042b7efa1dedad051c5ea4a2811
SHA1

6eb2d0af795076f7d296bce75b2e5775a42a2c3c
SHA256

351ef5e27421f2bb6475af117ee1d19786ce820cc211a72413b407ab8509d8b6
SHA512

4d9322c248c699e6e38bca0c9f5932655fd51dc7cf29b175b65b249a55906fff7dbfddd6fe800f50c5b7674a9901c9528e0acfc668003c4e531b05107897f6d6
SSDEEP

12288:UTlCel+B1mjnK+crictBRUS99EwH5wgnGRg+JVKGs1Yem+BD1jWO3Qntd6ePFj:ZmzKFmYzEwHP6g

Score

N/A

Malware Config

Signatures

Files

RFQ-38541.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 926KB - Virtual size: 926KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ