RFQ=EQUIPMENT'S(SMR-84)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ=EQUIPMENT'S(SMR-84).exe
Size

514KB
MD5

50fa420e969be0eaec3c815d92e60850
SHA1

b2fafb4de66667c5b35a8d010703762079d67ef1
SHA256

47a25f151e6b9ecb71a185ec32a7e4c21b643607e27adee27e91b65bf2a94b2a
SHA512

29973e722dd3bde6e2fd96ed7a815d135d88885a11409540a2d909dc73c18f431d80d66dec5ca2c9efb39f576dab7d273d0bf3abe8e918630289940bdf8075f2
SSDEEP

12288:RTo/iNt6gIHLl++y6MtVz60+E2q9YoudmvzOc:dtlIHxNy6MtE0+E2qOouaT

Score

N/A

Malware Config

Signatures

Files

RFQ=EQUIPMENT'S(SMR-84).exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 497KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ