RFQ - 0000565[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ - 0000565.exe
Size

939KB
MD5

fe01485cbbdf339c247aac12d530e864
SHA1

6cc7b0291b0b16b58cf03db577022b77925ed19f
SHA256

7d791babd4dd8e2525bd8d999289756b1f4d145e3c0449d6c1cf7232676b4458
SHA512

739bd89c21366cd202c5c2d48793cecdfeadc71ad8cb765a5143c7be82f2cd16dd8619af3457ae870cede1e8ba7ced5f3c9b6a2f5b5c0950021b7dc3ebfc50c0
SSDEEP

12288:mQm5DtTDx4bXIJfucnFedt2afmK+gHZ0SWr:wv+XIJmcnoPYgHZ96

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ - 0000565.exe

Files

RFQ - 0000565.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 936KB - Virtual size: 936KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ