RFQ project UzMTO (Uzbekistan)[.]exe | Triage

Sharing

General

Target

RFQ project UzMTO (Uzbekistan).exe
Size

882KB
MD5

737378c901a202e36a7cf0496c40becf
SHA1

8409b35c0c7ee39b7cd68f7471bb6d9373648379
SHA256

2a62b0901586adcfed9a57c10d5cdd13b53db183d52c9e3ab296df05d634b146
SHA512

a79dbb6bba8878dfc22fe4d907ddb39dad848bd5e836400847c21312630ba445d93840da6b858a617e37fb3421bf79cfcbb4c1984d108b0f2b82870f6d7985f6
SSDEEP

12288:zBTU8A8RppNfqVu3TZLt78lFC927150Pbkttml5OHN6dPfh:zJ8+fNfVTZOlFbsKImHQdn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ project UzMTO (Uzbekistan).exe

Files

RFQ project UzMTO (Uzbekistan).exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 415KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ