RFQ MT-764439977[.]zip | Triage

Sharing

General

Target

RFQ MT-764439977.zip
Size

592KB
MD5

00dd61e46445637de51c6a31423bad7f
SHA1

51440eea0e807d8e1caa646deb5d08bdc552630a
SHA256

e0335f642eb4b7deec9f038c09a6be39cfdac7fa609aef2bbb45c771ba25c1d8
SHA512

3a6fa53ac12ec6a3d4c25bea352fbf0ba78c99e576a3cbffff983d50a09730de67696186a4a23950e3f7aa029aa00700b17b71713d5ddd99f49e5959104869b2
SSDEEP

12288:4t8kuXXcryObxkEDgyhriqVMWTohBBnyo+gq+vosMZx7MKptdyZZfiLc1:ZZFOby8zwBnJ+fBfZnRyZZfkm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ MT-764439977.exe

Files

RFQ MT-764439977.zip
.zip
RFQ MT-764439977.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 599KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ