NEAS[.]NewRFQCO213538PDF[.]ace | Triage

Sharing

General

Target

NEAS.NewRFQCO213538PDF.ace
Size

836KB
MD5

03d4cd64d2f6d5f9a8897f3507b6e4e7
SHA1

4e38f8f98142501e83e309d1a30215e2a7e17b7e
SHA256

10c7529595589edaefb4335f222e725d1ead2a883894fd582651367a47f1dcf4
SHA512

23a5925749351c11b889320ff80de64a23acecfa9aec34d16c515793d887baa958d5bc6593b729a8861e6de902336111fd38244922be1cd8ce8466988ee76067
SSDEEP

24576:wXWXqjomPG9AdgogzenBAiYQ5ae9F8Ii5n+DnC:wnjomP+AjgzenBR5Jf8N5InC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/New RFQ - CO213538PDF.exe

Files

NEAS.NewRFQCO213538PDF.ace
.ace
out.ace
.ace
New RFQ - CO213538PDF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ