Static task
static1
Behavioral task
behavioral1
Sample
RFQ-PR#204893.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
RFQ-PR#204893.exe
Resource
win10v2004-20220812-en
General
-
Target
8360396126.zip
-
Size
633KB
-
MD5
cfe8e60aef1610d7882aaec8243b0213
-
SHA1
9c17bfe594086a3ab5190ca60831b6fe5d8b02fd
-
SHA256
790c6e738181050ebc5920647e11400993a94cb6a98dc3863174ee9dbcfb1b78
-
SHA512
3b6e0e76d7148b25b7106372b352f7648e77368fcaa5dbffe8cf0dfe098830ab8f4d1aa5daae8caaf3735888a26c9fc5595c59843953da30b234a2f8141ca965
-
SSDEEP
12288:p/+iC2HHLzHwwU0+birxgwV5qSrI17wBj6vu42lqNqKfRqXAajso/71hP:p/+iLXHiNGyi51rI1U96vu4U8JfsXKoT
Malware Config
Signatures
Files
-
8360396126.zip.zip
Password: infected
-
7c3a70edb512e6bfc157631eebf7c63c14fc717ad15259e56c5af2418609ccda.rar
-
RFQ-PR#204893.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 749KB - Virtual size: 749KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ