RFQ-HMK[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ-HMK.exe
Size

862KB
MD5

ac81ea2da46c405ae0cd752dcb99f975
SHA1

666841d072d3450fe6817264d269325730374b9e
SHA256

0d870b6d00ecab33e548af14cc560c202edda83a38949d7686f289ca13a90ec0
SHA512

98596edae19bfeccc46c65a3d273e99b9d3e239c62a93c5321cd8b0158ef0872bcaba86e1ea19346560c7e246f7ca4aecdd373cfb6c5763b89f613bc47393033
SSDEEP

12288:VtutqbSe6z82uudNSi7GrRybssxWqdONCddfvOBkte24XYhdY575VkrmAseE:56j77GrRyFWCONa3OBkroSYJf8mAseE

Score

1^/10

Malware Config

Signatures

Files

RFQ-HMK.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 790KB - Virtual size: 789KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ