Static task
static1
Behavioral task
behavioral1
Sample
RFQ- 19A20060.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
RFQ- 19A20060.exe
Resource
win10v2004-20221111-en
General
-
Target
RFQ- 19A20060.rar
-
Size
474KB
-
MD5
39bafaec850d8ca204d839d8e54b0b07
-
SHA1
25297227104cfe5376fd3347ab8ecdabf11d488d
-
SHA256
1db859eb9aef5ca51d4af8d3eb0f263af3a497b3daf4dbedf1cdc6847c3213cb
-
SHA512
3770660f23749c239713f2c98a2c2b3c664b64d8adfa0cd39e14aa34353638415e32d6a09d0b14b2cb02b2732a359da8dde2982b3fa3bf4e388e6a188cab253f
-
SSDEEP
6144:kRdBlyerhZao8iWjT1cu7ONCvGXbD7hGwmvLNS5EX68KMl8J8PuhmJWkng0yMipX:QO8Zad/15OYvGXFvELxuTvcJU0yMipCW
Malware Config
Signatures
Files
-
RFQ- 19A20060.rar.rar
-
RFQ- 19A20060.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 474KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ