RFQ-SIS190523CS[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ-SIS190523CS.exe
Size

804KB
MD5

aae34cf25eb1f998fedca0c094d26713
SHA1

58524e737284fd7d4c54e9b2292a8f63ea4ebe1c
SHA256

7a6f40daaf68b8a573b92508dee4d90e8236b9cccd80af1e1d9e7702f4b29c07
SHA512

eb611a376de7a55d604bc986b52172c389e754d2cc2b5971b9bb0542230951e74c9ca3cb2d047418c4ad82a0e3ff0029aacdfd29c83f8ef73d85eccfec58e71d
SSDEEP

12288:GCcvG73htU7/2eQ1x9dnImPNQIBLNxClwpbxNoSYaSRQckR9U:7gG1tCueifbNZtTBpzDOQck

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ-SIS190523CS.exe

Files

RFQ-SIS190523CS.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 801KB - Virtual size: 801KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ