RFQ 080323I_SGS Vostok Limited (SGS Group)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ 080323I_SGS Vostok Limited (SGS Group).exe
Size

854KB
MD5

a00d8cf340062291f30facadb0f34551
SHA1

57c876a14552eff6cca7b90712f89717dc3cf61c
SHA256

dde5f8792d192e638e016e92baef8e05739e6ddf6c9a3aa4ac968da1b6d84c40
SHA512

7d6883862fe52be074d110ab5802ee77c7cbd3347773915641fbb2165d0b51cf22410a41d05066b19639537e98d30377d318bf15072514ca830c34da31f9838e
SSDEEP

24576:rl3D3M1fHSoN+cQCMh2eJe8Ai4M3KU1S:rl3D3MpHZN+eq2+e8Ig2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ 080323I_SGS Vostok Limited (SGS Group).exe

Files

RFQ 080323I_SGS Vostok Limited (SGS Group).exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 843KB - Virtual size: 842KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ