RFQ_635[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ_635.exe
Size

1012KB
MD5

ca6ceb7a94ac7e7467cf9e09fac116bc
SHA1

07e8ed493c57ab68e2b06d313429f8768d1e6bb1
SHA256

519af3eac85cd7c6ab35d18010103a00caf8b27e5d0bb734319dcea18104f6db
SHA512

bc24d956879c0f6dd59ae2b9cda2dbcab4c9aebdad92e0b406ab841bc0fe24a789d10d43a0313c1367c087ba6bd841690cd351fa9d0a0a734a347ae7b3528f6b
SSDEEP

12288:S0itiTB2QwbV8AUYqfLesaifb5Z6QN1sDC51n/5jjsrP75cvorMz19:rSV+RfLeo9IQPU21hf2jOAU19

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ_635.exe

Files

RFQ_635.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 943KB - Virtual size: 942KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ