RFQ[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ.exe
Size

612KB
MD5

5ab30e834a0e8ec6d95f569f0cf657af
SHA1

b0e3f33c4efe101073cb5432a25c918a5ac14ea6
SHA256

61abb254011d46a438c4e736cef97d8a2a51483f9fe6903f693479cd7df643bf
SHA512

0ed02a1c1537148f21bb29e2c02b5ad95f359057f80b803f793e1c53f7c353a23073bf7feab687a6c0bd0e51f82330981076c0f827a359bc515ea9cb22afd339
SSDEEP

12288:HOnbqjc1ZQLnK6+SDMH7IzH4t7/4ivc62mPgqSYT+cadWs9bLQylyJjO:HJMWntD88zE7Q8H2agqX+cMWJmey

Score

1^/10

Malware Config

Signatures

Files

RFQ.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 609KB - Virtual size: 609KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ