RFQ_1[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ_1.gz
Size

278KB
MD5

d0c5de55d3a2a9fcb906332a87bfe116
SHA1

5e57c371120578c3f56b3af577303599366755e1
SHA256

146977737942949e94e8757a25e8e2a96bd96c5454b2a5aab52771920dd015bc
SHA512

8fc39e836309b409d5715352255bd394fd50a97fb62e022782b898232168a6b89a8904a8baee9a5b471f405869243f259e1c14ef4f5d74537ad6f12eadde58d0
SSDEEP

6144:IS1Mo+SlD/6hCPtRPcNmyLoGmHWqGorbGBAsNDUk6PNomzwT93CmEN:FKtGDyc1mNmyLBmFGorbGBAskvETdCmu

Score

1^/10

Malware Config

Signatures

Files

RFQ_1.gz
.gz
RFQ.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ