RFQs[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQs.exe
Size

817KB
MD5

3c7670785f9f4e8ee9a498f0a6c626c1
SHA1

25ca09ad40dd13fd8c9e58e83fac4d85918ae1aa
SHA256

9975c3c2c7bb393e635997f7e9060557ddc22931a8d700e558b7bb2c8d6ff892
SHA512

4bf2ce5a436d447857b1ecd1a52d3494358d2385485f4ccbcec9577b4ae044668d63de81dafdbcefa279a80a6920b2df22eb10c4ac57991200b8798150fe30e5
SSDEEP

12288:y6bXxZvpmx4kMywFb/PLjQXPWZaDW75LE21zE8/8TJ:y6jx2z9Mbz8fuai75LEMH8

Score

1^/10

Malware Config

Signatures

Files

RFQs.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 811KB - Virtual size: 811KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ