Static task
static1
Behavioral task
behavioral1
Sample
RFQ - 85Y64738494_pdf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
RFQ - 85Y64738494_pdf.exe
Resource
win10v2004-20221111-en
General
-
Target
RFQ - 85Y64738494_pdf.exe
-
Size
625KB
-
MD5
6f365d1b266b1936315d73ec1a8dede0
-
SHA1
130823ec4dea0edeafd4054f4cda25c61a653ce9
-
SHA256
3f90a1bc78a794d6d4767a4019877315b5c7db201347acf7e339d4439e251465
-
SHA512
7719ab01ed48f117d507ccb4b2e8a29a810bc7efb1c1193a75b06bfc3d458cc24dc17c411924602a4c3fe541b0663a57217c07865478ab3c656af144aa7b3278
-
SSDEEP
12288:XbbIXPod2iNq39oo3F5/W+ttkBFkf/L5PyCj0nXo+2FTQe+7E3:Xld1w3io3F93tOByf9PT4nXtU+o
Malware Config
Signatures
Files
-
RFQ - 85Y64738494_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 623KB - Virtual size: 622KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ