Static task
static1
Behavioral task
behavioral1
Sample
RFQ-PL2022.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
RFQ-PL2022.exe
Resource
win10v2004-20221111-en
General
-
Target
RFQ-PL2022.exe
-
Size
919KB
-
MD5
0261a809d26ce14ea6a17ecf88d928df
-
SHA1
3e76422309284d232ac107a5c713524a7e72bf47
-
SHA256
42fefefaf3c63e6e11b4b5cb93071f6b34a4ff6d7af86da5790b439f05836e24
-
SHA512
117ecb471a312a4d607c799e486d58f1bfb79ec58933045d6c3edb7e8ab0e97e921cab7d3e47716011740e75a59ddcdf81ea7db308fd7801bb69b7e37ebfea39
-
SSDEEP
24576:E2ibJ01RGDylI8TjQkqGv6kwc0zjYPPMhwg5+RT:yJ0muTjQk3SkLaM0e
Malware Config
Signatures
Files
-
RFQ-PL2022.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 916KB - Virtual size: 916KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ