Static task
static1
Behavioral task
behavioral1
Sample
RFQ208016.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
RFQ208016.exe
Resource
win10v2004-20220812-en
General
-
Target
8325176793.zip
-
Size
9KB
-
MD5
4f03d70442da5a58a112ee9da732ae78
-
SHA1
9b69980515bd47a2b2928cd70688de13c2a77c37
-
SHA256
af282534e193a8675a9a2ee6e10fa267d612cc5d1549fe13e84e43c8326b0642
-
SHA512
27acdb33ac374c00829bba51ef8d3cdf31b3835872d644a9bdd5c41a98ef5f3d4a15a2b168ebdb621dcf077fbb5e5698df00c130a8d4ee349727dc067427a6c2
-
SSDEEP
192:BVOSe0Ax76hLZLfIm8bCntLE9XPSYY8nHqd3CPFhyRN+E3ke+gFjn9M4d0+Q8fSr:BV+kLqm8bCntLWXKYY8Kd8hONjpvFjnu
Malware Config
Signatures
Files
-
8325176793.zip.zip
Password: infected
-
1f419f76e42478998ca38ee8baea826b8ab21cca31b2f2fc6533604535c02b24.iso
-
RFQ208016.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ