Static task
static1
Behavioral task
behavioral1
Sample
RFQ_4600005663449000586451004.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
RFQ_4600005663449000586451004.exe
Resource
win10v2004-20230220-en
General
-
Target
RFQ_4600005663449000586451004.exe
-
Size
167KB
-
MD5
ed956a551735595ae636e41555bf6c90
-
SHA1
36948010e6b6efeb776ea7ce0b186dfe39940cc7
-
SHA256
f5d45572a6981b150a21819b7b10c24c13d95bc089f1781f18ff4ba489af082c
-
SHA512
fa86d1f6a8abab140a4d8aaa5db326fddc0037b9fa35b40c79673f8328e3e6dfa7f7cf6c5d70b45f06eb7d080072cca262516095b45f3b7e134eb5aa16e8bc36
-
SSDEEP
1536:sj5Zssqe3i8aIN879HWPWSxzZBmwGNrM7SPuA7SMhHiXbxo5p7lp2U0CXHcuVkZb:qvz80Tre8lr5C2tABDUVcg2zJT9Xa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RFQ_4600005663449000586451004.exe
Files
-
RFQ_4600005663449000586451004.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ