RFQ#AP-68523[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ#AP-68523.exe
Size

634KB
MD5

c0ace2bc72cad3d660078c50fd6cf67a
SHA1

2a15f8010fb926963993af9b6387394e0713707f
SHA256

c2ffffcbaebeccc58fc7c3a056c1c9bdbeeded848084e1100cec9d28e8b717e7
SHA512

0538bb56feff415104bb93bbabbbaa9c5f9d33d3df953f59da46ed55c90a1e17264832460dfbe45e056248d717d6a2a4a2f710793f37e0c06c190d3f06a2da7f
SSDEEP

12288:nOFC1OfJw1UyXyKpsXzuxyp7hlD3rD2vAGfzSYQFV7vc0PQFfJ:O9BwDynS4XlD/2vAyzSYQF1QFB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ#AP-68523.exe

Files

RFQ#AP-68523.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 623KB - Virtual size: 622KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ