1b1ef021990ad987d36d2999cc8b18c4bfc3ada3140eae08d0619bbfe35e9ef7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b1ef021990ad987d36d2999cc8b18c4bfc3ada3140eae08d0619bbfe35e9ef7
Size

633KB
MD5

b2ea832a67eb1e8512da7d1bf184f314
SHA1

ee09ca154a5a7d1ee26c76a67e6642532bffe953
SHA256

1b1ef021990ad987d36d2999cc8b18c4bfc3ada3140eae08d0619bbfe35e9ef7
SHA512

5d1be720c015ca69b8249a300461ad011ee9943effabe9895e61c7f18f966b75f99a1eba76592ce1d4a77e06034ec2c43eac04088bb770c330592b9b69ac0c0d
SSDEEP

12288:Lt4H4aGa3kY0Q7PEa7z3YClhH9AMhL+v8HEBcuCbHm9iXTrKHQq:Lt23Z7Ma7MehHaIL+v8HEBcuCbHcWGH/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ.Document(1).bit.exe

Files

1b1ef021990ad987d36d2999cc8b18c4bfc3ada3140eae08d0619bbfe35e9ef7
.zip
RFQ.Document(1).bit.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 705KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ