RFQ_20102023,pdf[.]exe | Triage

Sharing

General

Target

RFQ_20102023,pdf.exe
Size

696KB
MD5

609df6f45affdcbf51cb39a5fcfaf415
SHA1

dcc8c0fc0bfe4ac0621da24292cabbd1cff2d3fb
SHA256

bef157a5652da00c4e51f79e8a96bd0017216ddec319309074338c2dcf3dca8a
SHA512

24b3eb671595f55641b7faf822fd78278f589f1062d2035f1ad108c7e558deeca6be949e96a3cee1786b5671a3966ab3121a6592c9f7b5f7eb4016fb213d6a4b
SSDEEP

12288:Ub5yzvbYmBHmiR1d+f+jqqAUxCucPUV0uradJu5K+4vmST5dJmnqWA/8QgN6e3:mebY0Gw3+W+1Ux9cPqXrYu5KRmSTVmnT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ_20102023,pdf.exe

Files

RFQ_20102023,pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 687KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ