RFP-000000078908[.]exe | Triage

Sharing

General

Target

RFP-000000078908.exe
Size

713KB
MD5

d7d5be2506c55d27b940730fb0fb5ae1
SHA1

b92f24be0cbeadfdad4cd4e42206e9cf707b1798
SHA256

1464482f2d705d8813e983c4ee8582bde6f1d515c5e2c9406f13146fcf3f2687
SHA512

ff868b0ec8bcf71cb68ae33b3e331112c2c7f74dd4408370277021a8684f140ec514963432fb33774cd25c522a882abe125c18724cdfc83d20263d8fc98399e0
SSDEEP

12288:s0ZM7fJw1UsvGCS4xCPy9Mtm9m0NmSsbSWre7x7bieMOiKwPliIzuaiOGfJ:jCBw1A8mSsRrsMD9ilaijB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFP-000000078908.exe

Files

RFP-000000078908.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 702KB - Virtual size: 701KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ