RFQ for Ticket#672[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ for Ticket#672.exe
Size

726KB
MD5

8cbdc7d1fc24baa19b25ed1d3661cc5f
SHA1

abda75ce50c8c619686c22de6077d5e1c4ef78dc
SHA256

1c3e05c1dc57b82fb25bb8af32bad88ef17a5078818598c30738675ccc4729fd
SHA512

212ada65078ff6add824af6778a47aac059e82badab82a9de6a5e092444c8f3af1a37872e5f8a5bdb560eaf68c1f9d25bc73ec4559b923e30028159ededde017
SSDEEP

12288:mRFGL1gmxsGKpbRyDPaNKg1p0I9eOuSD1VUNu+5ybMmYsRDf7PTHBz:KU1gmqTpbUTaNK4p0I9vrnUNbZ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ for Ticket#672.exe

Files

RFQ for Ticket#672.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 724KB - Virtual size: 723KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ