Static task
static1
Behavioral task
behavioral1
Sample
RFQ1123031240058-pdf-.exe
Resource
win7-20230220-en
General
-
Target
RFQ1123031240058-pdf-.exe
-
Size
774KB
-
MD5
944efc548b160ba72d58f1db493ab9cc
-
SHA1
ed946ed4d693be32e66e2dd7a4eab81292e65137
-
SHA256
1d278f399e7f0d1d2e94cbfec05d485baf83006b6b65230ef77ea586e567f78a
-
SHA512
711954681c560afda1bd7ecc15c3e68404538d9a0d43aed7bb7529331723db7ad9070c6f3aafb85555583ef77598b2621e745846fa0c44f4ebeb0fda9d043305
-
SSDEEP
24576:hm3lWxMiQW/O4ue7d7bhfnhSA5xC6xasAR:ilYMiQWmS7d7b5Et
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RFQ1123031240058-pdf-.exe
Files
-
RFQ1123031240058-pdf-.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 772KB - Virtual size: 771KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ