RFQ197539[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ197539.exe
Size

518KB
MD5

a23efb1b89deb83b7a8793f85487fed2
SHA1

9182bb2e08009c5cd61b02ec80142ca3bac72e72
SHA256

e7f06200cee6bb175f82e897890ba54c373cbf408ede96a1994a94de0cca0cc9
SHA512

7ac9116628e9561252b3cba6e4ae18736a580df1c98d401367ebb635e7cc3e0a80f760cca0f7fca7880529a03afe1613e1e0728a28ae16be8271da1e4601cce8
SSDEEP

12288:cwmqQBw907AGIgxdyEsmB1PzSLGrenm4:cwf+fDXzmGKT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ197539.exe

Files

RFQ197539.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 515KB - Virtual size: 515KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ