Static task
static1
Behavioral task
behavioral1
Sample
RFQ.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
RFQ.exe
Resource
win10v2004-20220812-en
General
-
Target
RFQ.exe
-
Size
6KB
-
MD5
67ec811f36b800050ee51a09a79629e4
-
SHA1
a18c22e31f081fa0a9d6254d33fa5654f33d9a6d
-
SHA256
6614899c50b97538417516548d7a8e688b300fdb9b224618034e8a445990db20
-
SHA512
c675ad246b14d7edba974af718ad0c88aaffdb4ad1e3e8780b6fa27c174c54b71b3dc5f81f47b57b90d9bbf6005ac3a8ca778e9196507ee27396946081265cbd
-
SSDEEP
96:lnqX08e61MaVPoqo+CR4MapvzkmUXtshi0VUbzNt:gve61ztQQhzkfXt4W
Malware Config
Signatures
Files
-
RFQ.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ