RFQ-20220124[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ-20220124.exe
Size

824KB
MD5

6bb722b50f80116c0f15e5da874247bd
SHA1

da8394e92dd95ec3ea88892473dac6bdf614c056
SHA256

2d3a915422db61d554d12b68b8638f93ccea5684894b776c7683740f9ce0c579
SHA512

e8113bc490f1b8b5fca8d51524ed2e54d2f0c14d6ee418bc78a23b4641a988c6261665f1af0bddeb5ffacc9a917c06e7fc1f7c4efe3307a3854db5b17efe0775
SSDEEP

12288:6y10PPJaxEOCf5lpLR6AlAM6Qjo5MHccJTMaI3ngxASptyx5G/oQKLXZ65BdZuLx:xuuMHccJTMaIwxA7xePC0sLx

Score

N/A

Malware Config

Signatures

Files

RFQ-20220124.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 804KB - Virtual size: 802KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ