rRFQ100-519639[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rRFQ100-519639.exe
Size

858KB
MD5

18b4f16f04c2c21d6be60206341f337c
SHA1

4f6741b4059c3b72221e2bf85c20a85b7920f779
SHA256

689da1b41af4cdc8b90eb21f861115688ffc44555d7a5c7de13b38e36f041c4a
SHA512

c3e498860cdde07d1fa3311c9168142ff100f529430ebfc119e83c7f7831c01b01aa4cdb5604db4cb47ca284e9b0a594468f481e7196b0f4514c5babf1840059
SSDEEP

12288:KwcvG73htU7/2eQ1x9lD9fxxZg9JIfJ2oiMlZWIRljyzAEuiQr9LjJhodEyOabBw:KwgG1tCueiLWJknmzIiQFkKU1S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rRFQ100-519639.exe

Files

rRFQ100-519639.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 846KB - Virtual size: 846KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ