RFQ_PO_JULY0938[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ_PO_JULY0938.exe
Size

510KB
MD5

75562bfae73d4a27fdb36665864cc2eb
SHA1

1a853654bcfcb2c29e0b875cbed5cbedeabb337b
SHA256

b116d3e1d08801b4254abbd0187b3e264d2c66023f2099e25670cb580bd4e025
SHA512

587da745dd9d1ca654c1c80b6b59223a7607130c39941d877826cd2b278ea60b5fd73d765d41e456b9dc73c0a5a49fb187d92c9b5e1b76bc0e07c7a14659bdc0
SSDEEP

12288:ibqZK2borYnvmBFnAkPzQUy5HuubXkGerVM2UeTToUKojYbfC9g:3E2bOMmB9zLqu27e

Score

N/A

Malware Config

Signatures

Files

RFQ_PO_JULY0938.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 507KB - Virtual size: 506KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ