RFQ K25982[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ K25982.exe
Size

832KB
MD5

f33c23f36d33db364f6b1ed602487ab7
SHA1

d9d605380676f9b481bbb541e4111d00a72f1347
SHA256

8b791b6710b5504044aed9a40f64d945d13990e050cc1fd08d5cf2c9fe29fb5d
SHA512

ae1230e12fe202e7070f73deb327971621c31da05cd116b35855c4bff0cdbcb8d68b4411a6ab9cb64e123364dcf918f38803bb8e2850306e70703bbe8a5ac838
SSDEEP

12288:c8BGPHfaH25VfEVDm9zet/+AI3hfoKyZWdIi8Ys/o3h4RW6:c8BGP/aH25tEVDQet/+1hfez

Score

N/A

Malware Config

Signatures

Files

RFQ K25982.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 830KB - Virtual size: 829KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ