Static task
static1
Behavioral task
behavioral1
Sample
RFQ_63542.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
RFQ_63542.exe
Resource
win10v2004-20221111-en
General
-
Target
c32c63b814d65d77b588ce2c78887d14ca7e6c9037238158a791ad08de42e6b1.zip
-
Size
671KB
-
MD5
ee06f9aa149aab8890dcedf35cb80f65
-
SHA1
ecb9f3b84cd9f0092ffec132ae8fc083987bee66
-
SHA256
a950f7eb07791c1e7119db757c1c983538f76fa41f0c689c9ca0b5859d2f5bfd
-
SHA512
a797ed83d3543123ec833bf3886b7dbdd2a82ca60499d4fe8beb1d425cdbf125c6ee838a4efa237a259b02b4666c0cfab31362fa0db362d94a44750ced0f3a8d
-
SSDEEP
12288:XhXH4R0REK+zZPjPwl2bAgWkQf+UTTmVM6i16ouGdFco7d+0iS08e8xDO:iNzZslWWcUTT8RfGdFB7EUflO
Malware Config
Signatures
Files
-
c32c63b814d65d77b588ce2c78887d14ca7e6c9037238158a791ad08de42e6b1.zip.zip
Password: infected
-
c32c63b814d65d77b588ce2c78887d14ca7e6c9037238158a791ad08de42e6b1.img.iso
Password: infected
-
RFQ_63542.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 666KB - Virtual size: 665KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 169KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ