RFQ2573664PDF[.]exe | Triage

Sharing

General

Target

RFQ2573664PDF.exe
Size

836KB
MD5

71ec5221a2034695e676cf553ef632e3
SHA1

e724930b8c2aed088d4d205ac882197f8b67e462
SHA256

746604779bf099b84b5a237bc6e777b10cd9ca0d02e49e136f4856debbb89d65
SHA512

068c1cb9b4c552423ea6af41062ea6ccf7ec2a0c4abf4c37427b11d9ec11c95994caef2d786490032c1ab9c90ba8e51896e01f89f8d2e1aa457942d475ae7452
SSDEEP

12288:yc/9WflU/9K2tNHlu3elvjE63hjMLsGIWb/yqYHDC92OzfJ/:hylUHtPu3Gl6IAyq/2C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ2573664PDF.exe

Files

RFQ2573664PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 834KB - Virtual size: 833KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ