RFQ6689-TECHNO TOOLS[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ6689-TECHNO TOOLS.exe
Size

300KB
MD5

84833a6db11bbfaee0d1a4c865ded528
SHA1

3069fa29cfaba42f0f452c6701e3cf755b8a1426
SHA256

1470fd0a1b8a3eb0c9e9d4851c651b3acbc95f847bb2f56ee52239a0e62e4a0a
SHA512

172f5759109a27e4e6c6ede6028fcba3571aca374388f370b83fb5d559501d15e74377b396b4ea442454256a0263bc7e8ad73ec01cee11999569d600fbd8f2e7
SSDEEP

6144:7g75j47gc3z7EDH8xlTH1IcHRzMvekrjHN6+Y/La7z:i8ME7MeJ1I5f6na

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ6689-TECHNO TOOLS.exe

Files

RFQ6689-TECHNO TOOLS.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ