Static task
static1
Behavioral task
behavioral1
Sample
RFQ.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
RFQ.exe
Resource
win10v2004-20230220-en
General
-
Target
RFQ.exe
-
Size
886KB
-
MD5
c8e5f304628ea2be932730c9db713dfb
-
SHA1
7f255780e5ed9a387c43917680c08e1078b4cb8a
-
SHA256
2ae62a904a42345e91103d004336258dcade22cdbfba99374bc04f85fb960dae
-
SHA512
281fc56cbee1fa841f466f67f91bd15f0111003308dc4ba5fcab41ea277388fd899030b43f4931f90f5115206e2e4cab3b610c420acfbdaa1c2c8cdb0eaab91c
-
SSDEEP
12288:kXbMh6oP5tt5ARXvPhBjqXd5KR6fo+/hgl8LnhpyevEkQycmhVDQ:NIZhBjqDg6g2hRLfEkQyF
Malware Config
Signatures
Files
-
RFQ.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 884KB - Virtual size: 883KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ