RFQ#0080230023[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ#0080230023.exe
Size

666KB
MD5

0c3bd2f20450ca74be15429da6ec93dc
SHA1

a963bbda9dce0f9843f42ac0d9da67d0844bed11
SHA256

ed62c7b912fba38fc1615a6812e950adb19f5be0ca299f3ffabbe786bca937d4
SHA512

65d594b16906881d866ded91b66d1781fbfa6574731aaae4cdbc8492fe5c02ef19324f7d8e54dfb0e63a781c625be43b62f683fbd575ef4dd52be9d8e03780fd
SSDEEP

12288:/dfSRtt2lq3PaLoxkUkeE9WwWvNWX3GTgeAbCS3hM4ca68KrGs6aSZgjGjhf+wOa:/s2lq3yLoWZcWrTlM5ZFL6zgjAdv8n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ#0080230023.exe

Files

RFQ#0080230023.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 664KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ