Static task
static1
Behavioral task
behavioral1
Sample
Revised Specification RFQ.exe
Resource
win7-20230220-en
General
-
Target
Revised Specification RFQ.exe
-
Size
968KB
-
MD5
136f89c68d9f677034b11ebcd52efd7d
-
SHA1
0833bc0b6758d74cd9125c8ccc44ad25159c2cf4
-
SHA256
a399db6453e7a8754f1b14749988ff49365dafb3873b782615da5be9f52fea19
-
SHA512
a0eaca8e8d5af32b333374a908eddcc6c5d683bc0d0d6fdbd2797bffa565f6ab365e863ceb001af29167b1a38d929fa07aaa71c30850d53eeed4f50a7da000ae
-
SSDEEP
24576:xSqTC/f/7h5I0Iq5Rcu0Z46owxUh4sINPsX1:x3U7h5RnFph4ZNY1
Malware Config
Signatures
Files
-
Revised Specification RFQ.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 955KB - Virtual size: 954KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ