RFQ9876543--989098S[.]z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ9876543--989098S.z
Size

652KB
MD5

c9c82ffa869eaea6150c8f3638f0a9b3
SHA1

f0522d4699ea8d40f4e1de48b24d0b900329ce6d
SHA256

9fcb4b52b739abcc416105438d6a7b7882224025519af3cb020db63af3c3fe63
SHA512

b22db2d2400580aa153e4f2df423b8275665f48f89c984ffd7f717588336f18f4cb6dbd38ec8938d05752aead47bfaa110a5712050666719af8856f0074fd759
SSDEEP

12288:O62/G3H0LDh09LtAJW718ieNxVSykCN11Ly8Q3A9NULgV9SKTqjH7zitglxOcNB:O62/GELDhsLtAJW7GiSVHFn1fQ3CNUUA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ9876543--989098S.exe

Files

RFQ9876543--989098S.z
.zip
RFQ9876543--989098S.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 706KB - Virtual size: 705KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ