RFQ-C-23MAY054BR-xlsx[.]exe | Triage

Sharing

General

Target

RFQ-C-23MAY054BR-xlsx.exe
Size

545KB
MD5

bb21d23dbf34238e5ecda0c262c8fdf1
SHA1

6bca5df81cc86d3f0b1316f54b18131310a24bc8
SHA256

9acece99f4c28d2bd3855e18ebdb8e5240be3521f89b6f0f9769c7216757e286
SHA512

51d43c1108ed2b6b1a23db14620c53480f8b200b6fc8446430cbe08f4b1dd174cf3d33f9ae4318ee7f0a5514e8ca2763d6a0cc464ceb686f382f3214c6c62be0
SSDEEP

12288:7msnuX80IkSjQqGab2CjfjB/+aFkhmIws:puMZTjEG2CvwNII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ-C-23MAY054BR-xlsx.exe

Files

RFQ-C-23MAY054BR-xlsx.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 531KB - Virtual size: 530KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ