RFL QS30033-AHS09pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFL QS30033-AHS09pdf.exe
Size

1.0MB
MD5

3bf9d17f79b46208fcb8dff15f76680d
SHA1

bc009db36a54a1fa60cd4ccdd8bfb648a17250e6
SHA256

1ff6f3c8392423b5bde4173795b2978516b7a1aa77df5843742eab359a9ee405
SHA512

0cfaf8c49a279a2333b897247f3a06e745cbb96b74d9cd9472a4c376fc103fab8f8e689b0d63c551a3132635a3e54121ee63eb2d64b5fd6f104c63761a473856
SSDEEP

12288:fS4XzcaQ8w49N4u92WidV3GTkVBX5BAFlVypt8M+nD2TmI0Fa8HOn9Y4:6gRQ8/36WIDXnAhM+nKNp8HU9

Score

N/A

Malware Config

Signatures

Files

RFL QS30033-AHS09pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1024KB - Virtual size: 1023KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ