Static task
static1
Behavioral task
behavioral1
Sample
RFQ_ALTE.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
RFQ_ALTE.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.NEASNEASc4c7cf19f4f4e55038ea45a10e363b4325bd56b48e1976d0f073cd69a9d44f72imgunknownunknown_JC.unknown
-
Size
1.5MB
-
MD5
83abb9d6bc5ff12c98ad67e800006775
-
SHA1
e477c53f2efe76946b3875f26b330a78505be030
-
SHA256
c4c7cf19f4f4e55038ea45a10e363b4325bd56b48e1976d0f073cd69a9d44f72
-
SHA512
71b72f91c218c9c0c6cbc38f01542a700093e7a4b0e54985cc13cf04439e5bf236afac05df806f5872d55cf3758829021f2f46c98163425f6195d1b0ad21eecf
-
SSDEEP
24576:2KtUSYQsBX0uPMrD5BHq96GnBI61u5EjbqpES:2saQsBX0uP65LGnBG4upE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RFQ_ALTE.EXE
Files
-
NEAS.NEASNEASc4c7cf19f4f4e55038ea45a10e363b4325bd56b48e1976d0f073cd69a9d44f72imgunknownunknown_JC.unknown.iso
-
RFQ_ALTE.EXE.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 880KB - Virtual size: 879KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ