RFQ_20240112-876678xls[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ_20240112-876678xls.7z
Size

579KB
MD5

86e860aca925fdd7b4d3f7149cbeecd9
SHA1

007c1d432518fcbbf824e7d4e2ac36bb54aa159d
SHA256

191d89e5b1552667d8af1aaa1e8b4bd003c6500044921c8ac0957ababe015b20
SHA512

4a0b658faa238620c7cce9bab169a400b476666bc75287c923059122857ad55453e9e3db1246511e82da847a1c67c2ba27253b47285f3e734b111e0a2443a932
SSDEEP

12288:lhsmdhG/lIhkX+DevC5j/ySPkCMSzncbSA/orZXTiDOp00ZFUO:lhsZ9mkXGe6fPXDcidXTLF/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ_20240112-876678xls.exe

Files

RFQ_20240112-876678xls.7z
.7z
RFQ_20240112-876678xls.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 629KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ