RFQ_532909000000452129000056[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ_532909000000452129000056.exe
Size

200.0MB
MD5

607ed6a7ef9aa41dbd22c18de6b724ba
SHA1

2e11468bf4d027ae30736fcd8aa73ed6b735cd1f
SHA256

89a134d2b2435bae03d297522b71a3c7b6563cffe7853cacd12c32a07989158d
SHA512

04fa9c73ea82694dd9add1f0af05da57a698de4ee438fd18f5a21b322b7806fb0f9efddd8767c81c44f9ccb589af75fe49196b2805b3705af516da4e6498931c
SSDEEP

12288:ohDID9dV19ERCwJaN9DdcffN00TS0v2bG:o8B/mCwJaN9DdcffN00vvz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ_532909000000452129000056.exe

Files

RFQ_532909000000452129000056.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 330KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ