RFQ_10022023[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ_10022023.exe
Size

865KB
MD5

4b9994ac871483e1dd6ba5d7ad9e40d2
SHA1

0ddf6441a98faae65c3efe0dd7d188c12d11e215
SHA256

eded555a7a575a6335ccc1c59ac51b58eb00ba3f43a0d5ed66f2af28f4d3bcf6
SHA512

276c6c98bbbc7709b3cf307fb0d0c7971b0372e4ff3ad65f5659fdf1baff78a59bd15ad177dc08f14fc5af25f3c882a429213a01b80419b4e7023ac97d8c0aaf
SSDEEP

24576:fY7Ax5uPMsPXlUTLf8p9CHproZ1ED8Kn9Y:fYMxAMK1mLfjJrxDX9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ_10022023.exe

Files

RFQ_10022023.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 682KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ