ZAINAB JASSIM RFQ[.]exe | Triage

Sharing

General

Target

ZAINAB JASSIM RFQ.exe
Size

606KB
MD5

c2c5608797a537b3af5a4b1ef3898490
SHA1

c98dabb52ab26eb5d3d7ffafaad37835f790b3f5
SHA256

cd94bb8956e12aa67943b6bb657f17d2680b848b36f8726283a2037d1d588461
SHA512

c580379700802ed8be636c0be326eaebe533963b6fd53fbb16405094776b56aeb0fd36ccd31eb399c6395a99c142476bec9c909895d6f7a595d79789cd7b03b3
SSDEEP

12288:gY8v5iYGiK+n0wC2Pf8GTG8K5gm+IFwo3vkOdyaC/dmkG2QRKHGcsdb:ukwCGNQgm+8lvk2K86kp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ZAINAB JASSIM RFQ.exe

Files

ZAINAB JASSIM RFQ.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 604KB - Virtual size: 603KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ