RFQ 21032023[.]gz | Triage

Sharing

General

Target

RFQ 21032023.gz
Size

960KB
MD5

2301043278ee73f6f0ecc6b49ecf45a7
SHA1

0f89207aa8647d59dcd980d8095651e893c46ca7
SHA256

3a40ac14fd18095afb3e8ba414be572421b11bd60d2873132fc704398a472197
SHA512

bf330dfc5db9e87e5888b67476f5279892360eede099d588dc20c3a44d3171cb1faf235f114996e17c29a40123529e4dbd85c30c0d9b3d07e32ef34c6a4a2ad8
SSDEEP

24576:337BW1xLO8LXWgkOPPl6cBnNkTHVH+vmlOpsOEN2:eFvCWHlnBNkh6os

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ 21032023.exe

Files

RFQ 21032023.gz
.rar
RFQ 21032023.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ