Static task
static1
Behavioral task
behavioral1
Sample
RFQ MR 27136_pdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
RFQ MR 27136_pdf.exe
Resource
win10v2004-20221111-en
General
-
Target
RFQ MR 27136_pdf.zip
-
Size
778KB
-
MD5
a89f8fc5f6dbe0ed0567665bf805e500
-
SHA1
fe5c6f4aa36fe572f01b5b2813521beecae5653c
-
SHA256
13374aca0f6140ee4b3c0dc456c1555722cf883a794ee394c0d1cfba4300ab6b
-
SHA512
a8316b64425288683f0e3a35a9c8af9e793247632720506cf4f06f8aad665360269b19bf3aaa363d0d4eb41761cedbb71489e637257f7e93892766c7977e9cd9
-
SSDEEP
12288:l03E6KS146h0sYDheiaEJ2H86u+5P/Wt8CAsREikbgbiBU6wJcmX:CE6Kw4NBFe962H86rZ+iHsREi0LvmX
Malware Config
Signatures
Files
-
RFQ MR 27136_pdf.zip.zip
-
RFQ MR 27136_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 908KB - Virtual size: 907KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ