Static task
static1
Behavioral task
behavioral1
Sample
RFQ_0038.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
RFQ_0038.exe
Resource
win10v2004-20230220-en
General
-
Target
RFQ#00388-SJOMAN ENGINEERING LLC.IMG
-
Size
1.4MB
-
MD5
c31d72708f0ef7b4f486f179b7307e22
-
SHA1
07d2ad29a379644da168c23f354b9c7830d58dab
-
SHA256
8ad34475d53029cfd41c1b18a59e819dacf45bb4655b6d5c3d918cd17311dc52
-
SHA512
abd9f498f5335d7e747ccf8ecd0bb558384e313e4318ddcdad975714241ed5e7f781ace845e76319fb1d892f05e598e949841aa8f4f5c5b4c871846fa9abbf87
-
SSDEEP
12288:dKQa8hYsUkIq6HE0rwKfNvhM8fhLsYX8CdClLqbMqcESTQxNqv6nnjqKoe:dT0p7rFNvhMAsYZduLDPEp26nnjqKoe
Malware Config
Signatures
Files
-
RFQ#00388-SJOMAN ENGINEERING LLC.IMG.iso
-
RFQ_0038.EXE.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 665KB - Virtual size: 665KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ