RFQ for Req 12465[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ for Req 12465.zip
Size

631KB
MD5

bd5356459f0bf42d2530cc16e882afb2
SHA1

0cf347be60e27c5ffe56f43004b4bc700c29aca4
SHA256

59930f893ea97b7afe62de5a914e3386eea4cdc0549698660cf5c29b16fbfacd
SHA512

01b1db04d5b6f9ae86bd616436e57cca0aaccfae297ffd204d21af0afa9ec990764537ed114bcdf5cf80838070e30d61f9255da82229d18d26fa5f6779b9e974
SSDEEP

12288:+bxyvEYppP4J70sN7HcSDkuVbLjF/i8M10QmNdPhgribxy9Dp0DY:+bTWCosN7HbDkuVnjy0QEHxq0c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ for Req 12465.exe

Files

RFQ for Req 12465.zip
.zip
RFQ for Req 12465.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 823KB - Virtual size: 822KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ