rMAQUETHolding_PO-2532446[.]exe[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rMAQUETHolding_PO-2532446.exe.bin
Size

796KB
MD5

72add58144a60d23afd1e51ae9480d9a
SHA1

3317b5cdb56d91a6551ba2e3047a39e4c6ca9c38
SHA256

487684e01b232a60cff5d2eb9c1a438e3b6545a6e2610771084079bdf42764fd
SHA512

21fa17bd2cc3ab3fd0e724d8f4a5366cfbbf5b6c73364b04a3d46fb68e847de72c0e11cd0ab84568fb6146b2ee48f9fac642b9daf7c8b97191e72c0cb2858485
SSDEEP

12288:mWRsSYqvPG66yKVdQNjWGEEq4oDq+ya4NMrp+3ETZ/UfIpfa:mCsTKPtodQNjJT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rMAQUETHolding_PO-2532446.exe.bin

Files

rMAQUETHolding_PO-2532446.exe.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 783KB - Virtual size: 783KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ