RFQ_28221043_PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ_28221043_PDF.exe
Size

767KB
MD5

cd7dc7ecf33e5182e583a1024fb43bef
SHA1

4d497e97c5bc9db5f79ab7d9ee837f5620965c54
SHA256

c396afe63cd1208d74a07dba56acd296a3273ea45e19b236f5f0127064afd5c2
SHA512

16966fb38573c5ff4ed11c18f92f9dbcd44d4db46e32954afcd0c244d120bb75d68cb55078e0f2d8abe8b15a03889a0a41d20483a11e380065a9138cd1f44f29
SSDEEP

12288:cfR+Bah6kLSMiKiHpP8j8bQX1Ou3clba56g3:cfR+BKufuXOKfz3

Score

N/A

Malware Config

Signatures

Files

RFQ_28221043_PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 765KB - Virtual size: 765KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ