Static task
static1
Behavioral task
behavioral1
Sample
RFQ-01.300.TRGVH.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
RFQ-01.300.TRGVH.exe
Resource
win10v2004-20220812-en
General
-
Target
RFQ-01.300.TRGVH.ace
-
Size
937KB
-
MD5
d34b891358b095a92ce651d2e979ded7
-
SHA1
0e14dca26c4d64d688985ae66c5e73555171ee80
-
SHA256
f0e74e898047aee18b1ea7d0b0914ffd8bcd5c42b8bea13740b4e6889c811f14
-
SHA512
0a5a4bd260e6af330d5fe4c6a5bdfd097e6d299d6b7fa0d6fa9d85ce59f50d5b5b3ad535484e43923f6e310e0a20858bc63a1b05116db1dbb19a86d6388ce3c7
-
SSDEEP
24576:2OLYa7Jb7gj4e9srBKPAhyoXQ4dscZfTuSH6zrc6OnMRqofEQu/B:4Wbkjp6hhjxdsctTutzw6AGqoUB
Malware Config
Signatures
Files
-
RFQ-01.300.TRGVH.ace.ace
-
out.ace.ace
-
RFQ-01.300.TRGVH.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 997KB - Virtual size: 997KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ