RFQ102722-AL NASR ENGINEERING[.]IMG | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ102722-AL NASR ENGINEERING.IMG
Size

1.2MB
MD5

50d86166e317a1b00aca1548508edd86
SHA1

ac92fc469841124dd520e937c85f9a5c785f75dc
SHA256

757e1b6a15cfd1cb4cfe53af5efaf4067da6b481f1a7c2988004fabed42eb44b
SHA512

537cb113d3fec78aa0e7005bc976191fc90d0c61a66a27c2b90203ae42b91e01d109f33ec67d104e639e50c42e82065385631014c35bae61aeabfc204e64e61b
SSDEEP

12288:DWadgFTrb7FRTE6Acfjj5LStS14rxIhbhR:6cgFz7FRTE6VrdX+s

Score

N/A

Malware Config

Signatures

Files

RFQ102722-AL NASR ENGINEERING.IMG
.iso
RFQ10272.EXE
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 460KB - Virtual size: 459KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ