Static task
static1
Behavioral task
behavioral1
Sample
RFQ 120.exe
Resource
win7-20220812-en
General
-
Target
RFQ 120.exe
-
Size
685KB
-
MD5
20abb77d986979d1826e03f0b21eda8d
-
SHA1
e9bba65a4ff3b19edae1f445758bfcc5a8624e6a
-
SHA256
9405e5517f3a40a2dafc9e86359aa53e211af30c4fe1a7f77b24bd42ccc36354
-
SHA512
f1295d95243f7eac792426e551405f0af533518419a3a45793c116eb67759cb49e6db32c8b87a382576152019ce0cbe5da4989b45bf4076d6b1f776283247e65
-
SSDEEP
12288:la2PFC1Xliyg3OPD0hsJa8V1xUAbWJDsUqIJc92qD:g11XliyfD0h70YDs9Uc92g
Malware Config
Signatures
Files
-
RFQ 120.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 616KB - Virtual size: 615KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ