RFQ 0071HS63[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ 0071HS63.exe
Size

618KB
MD5

f72b59e18d4e0c55ed7810926a3aa510
SHA1

ebf5c7d7bac4c53738c62412eeb34a57e19630dd
SHA256

1404d60fc92ad4f5e3059a37a50bc70803f25404635f969333b4618b891e64bb
SHA512

bdd0eed7ea99b7e519c1c71df0e9586b8fd6fc171ccf9e91ae2366718800b2bb08d17eea8d1b34270fe76aab9c54187469bc356f0402b9bbef04b04dd41a2e18
SSDEEP

12288:z5y2iNnaMzOOeyM/xOARNW0DAQsyiOZCgY3rStGK:M1QMzOOggAnIyj4rRK

Score

1^/10

Malware Config

Signatures

Files

RFQ 0071HS63.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ