Static task
static1
Behavioral task
behavioral1
Sample
RFQ Jan 2024.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
RFQ Jan 2024.exe
Resource
win10v2004-20231222-en
General
-
Target
RFQ Jan 2024.img
-
Size
1.4MB
-
MD5
c461d645aefd1771829e4ed7db12f67a
-
SHA1
f3c9bb54c333e71e490e331209ec9862a2b9d7c5
-
SHA256
437a7fe43e1d76e26bd990e0dc52f0e8bec128f0cbcc34171c2633beff0fe1d6
-
SHA512
60b545f7db479cd213326d31a538cdc70391080fff49265851357ea735590ec1416e2410b20294369a8bbe6f161923e8e048dcbd680504e7dec89087f3bda36f
-
SSDEEP
24576:WFp2VoW1CFI5Ldp7b4wszmdT1AvDOZfMVYHm+ptJulddcsWwAR:LxDP7PGuMvGkl7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/RFQ Jan 2024.exe
Files
-
RFQ Jan 2024.img.iso
-
out.iso.iso
-
RFQ Jan 2024.exe.exe windows:4 windows x64 arch:x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ