Static task
static1
Behavioral task
behavioral1
Sample
RFQ_SP_3.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
RFQ_SP_3.exe
Resource
win10v2004-20231127-en
General
-
Target
RFQ_SP_301123_PDF.IMG
-
Size
1.4MB
-
MD5
974f6e30bda8e396a773b854a3aa0bac
-
SHA1
089d17a537d34cc937ccdf3115c3e74711c1a229
-
SHA256
cc7313fd3ba276e92943c69b02f85cd1aefb07594e074bf5568b57a22c400e5f
-
SHA512
467b25f9fb5b280bbc55a825d2a3e4b9b48115df35030c9446f74fba8b09d90f73c332c93971feea91a9577433286c9c9095e723012edbd0b1b91dfd8ad2042c
-
SSDEEP
12288:7W0tW8G34/uK45+po2YnBlBfdA9sCOGMGb6ikxAfzIwJ+FupSh5qA1AT2z3/:Q34/up+pJ8lBwsCOGF6i7JdpSzqcz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/RFQ_SP_3.EXE
Files
-
RFQ_SP_301123_PDF.IMG.iso
-
RFQ_SP_3.EXE.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 811KB - Virtual size: 811KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ