RFQ10211789[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ10211789.exe
Size

958KB
MD5

3f5acd18fafa8135fb5b79e1f4dd82d8
SHA1

ed72091f7f899b2dbc867e9d7a392e0c05889011
SHA256

367ad2811e866264241a25ba14f5a91ea554623f73f1773d4cd41f338df00d76
SHA512

88f299de0d39e6c75f5bd7e43180d39ce9fd30374d3b69fdfa7e6e32b5dbfe0508d41b5abd74b600429bfdf0d00f9fd5bc96a472e4fd87e563603646070a1767
SSDEEP

12288:Of/kYSWrmquse3JgDaZ3y3PVOJj5xtwUuWcfAWxkNkkt5:OkB6Kgu+wBR5YAJt5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ10211789.exe

Files

RFQ10211789.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 953KB - Virtual size: 953KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ