Static task
static1
Behavioral task
behavioral1
Sample
RFQ103122.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
RFQ103122.exe
Resource
win10v2004-20220901-en
General
-
Target
RFQ103122.exe
-
Size
511KB
-
MD5
9faeb936908d7024283eee5d6db8e7fa
-
SHA1
7b2947af891c5f9c5aa4f05df16918d4e2a3da30
-
SHA256
e85dc65859ea657f71942bee61be87ca899a9ea50f80e63619590de1f5e81713
-
SHA512
91a613088930820abe9c4e57624f8beb7e0e1e2e44aa4348898c0b952daddcf085a3a125ec428930d4919c460c7c448e5b5b0658a9b01056bc8e0c608ecb1909
-
SSDEEP
12288:17ZlCtrYRpJFBvDy27gwusS+49cFD4CedQ7Y:17ZlCBY3JFlWFFsSbysCedQ7Y
Malware Config
Signatures
Files
-
RFQ103122.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 494KB - Virtual size: 494KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ