RFQ-SIS190523CS[.]zip | Triage

Sharing

General

Target

RFQ-SIS190523CS.zip
Size

719KB
MD5

70ab2f45bd20e6726a609a63f72baa0c
SHA1

7e0f6c630682cf0c9c7f93fb49f7e30fa23dc372
SHA256

c820ee5c73fb1f7db918452238c7bf8066335875cacfc15d78879048dcfb428c
SHA512

422c2bd6ba29c35ea0568acdf8ef5d97cd8c6f4c1e29d2c937d3073c5cf19ee30aaee78f4c855b5847434b495fcae460094e38ae32511e286410a10a10b8cdf3
SSDEEP

12288:aSF+mU8iV7uKslMRpOTnjD7+ZQ0Bkmf/lr7xNOS8aCFk7KeWRZ51f:aSMmU8LCRpOTj3+Z7ymf9TtE+eeWbf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ-SIS190523CS.exe

Files

RFQ-SIS190523CS.zip
.zip
RFQ-SIS190523CS.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 801KB - Virtual size: 801KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ