RFQ6689-TECHNO TOOLS[.]IMG | Triage

Sharing

General

Target

RFQ6689-TECHNO TOOLS.IMG
Size

1.2MB
MD5

3faf788f926eca3e7f212315c37efbdd
SHA1

db1fc36d1cb1a6a8ce584a0b9eb1b4b48565bd75
SHA256

c667f647d67683bf1a115fc2cf56e98767f8181bf3bb8630941b1969e3b46d2f
SHA512

60c30c24515a118e91a3215f6866774b36c0fb9af1bc287778127707f599dbc7f6319d9a59f289df15823e12639a37c43892c0d1ad2d5807ffc4bb3fabfc80f9
SSDEEP

6144:5g75j41hH+v7RcPHXFSJwyvmPNvqcYCkfZsvL:Q81Uv7RK3FSJBGNZD8sj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ6689_.EXE

Files

RFQ6689-TECHNO TOOLS.IMG
.iso
RFQ6689_.EXE
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 337KB - Virtual size: 337KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ