RFQ[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ.exe
Size

927KB
MD5

9b53d976adfde8e5436e6359c9568933
SHA1

57aebe643f9065b4c9efa4e945b0ab7a807360b2
SHA256

96ff5bcf667a4a652f0a1c556b1d2e5a6b97a483e65ff6f87a6c62a37e587fa7
SHA512

93cf5a529dabc105f26f38a6bd6c594945b7ef87b76b650f6169ce116952f9b3696c398f76433ef2e9727e84a128330ec4733903a9b0faab7b39490c6dba5a80
SSDEEP

12288:cXpiOwQg19RlriehWAiO7icDj3eHl0ryNM3mvxs4KXGl1KiNObKf:cXmQgD+cWpO7icDj8lvq

Score

N/A

Malware Config

Signatures

Files

RFQ.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 910KB - Virtual size: 909KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ