RFQ#01942[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ#01942.exe
Size

695KB
MD5

b7531f015e15c9b1733c9d7f26a60f41
SHA1

cf76b130d5ce3bc711533b0c52eea59e403289a0
SHA256

ca6ec95e35554a39ffb8cb132f253c56781a23c7618b08f9710ffa828e6817ef
SHA512

56542ef3f35196113ec2f7f0bf7da2b32a685040f3c610647b69bec377042a5d9789ad026de1c02daedfa3a0a1d57baee1b0db32fe8665982ef6a5f6ef6070a3
SSDEEP

12288:HfBHAMTihh6xhZ6OrXe96SKIjC5gU2ovwk5OxULP0Sg+Lu:eMUgh8yI6T4NDoVES1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ#01942.exe

Files

RFQ#01942.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 693KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ