RFQ2100015729 Spare Parts for N80 Pump[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ2100015729 Spare Parts for N80 Pump.exe
Size

574KB
MD5

e82243c7c089c20ed8934446f23e2cfd
SHA1

b14197039c3390000c206b76c7f27606ccdd4e78
SHA256

16c70890f10e57d8fc644114f168b302a49bca04865b7af24f8e10f81d0e0e1e
SHA512

09922439cb95e5b6ca0007f3eec8d3b2c3b76703902248dc02d5695b1702585d0cf9fa708210a2b0296cbf4f8a36a6b3bb217ec7b2819e6735219e2c17aa1bd2
SSDEEP

12288:SGx1HsA+e5O03HwAPnSuHtoor1VsSEl73g6lZEZuKqYY7:3x3+eA03jPJHtoTlsAYrqYY7

Score

N/A

Malware Config

Signatures

Files

RFQ2100015729 Spare Parts for N80 Pump.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 572KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ