66620284ba61a3f8c2c5f4ed7dd8e7cb

resource
unpack002/RFQ Rosemount.exe

SHA256 3c739358220734d18edf97e09acdb0ef93b835f96c31dcbcb7ad86a5198e0b12
MD5 66620284ba61a3f8c2c5f4ed7dd8e7cb
SHA1 ef382f3e40c6ed437635ffeb08a7b230d52b0003
SHA512 1f40929e227c6202bd4e6e48344128c57e54a4de030611cc828d9bd71cb87066aba5bbbb95a72ae01d7d8bb7c4c68b4574492defe942fd7cce403bdcc3b3ee88
SSDEEP 24576:CKyd//HXC3Q+4tusFc1Ckb7t1BJGrKDNk0nxgdNqs:DO3oJKPF8feODpxAqs
MD5 SHA1 SHA512 SSDEEP

RFQ Rosemount.rar

SHA256 42b406e01195f7920a77dcba912e23d052ead885823558670cba781f3b0e184a
MD5 6f97b32f53d41337fb13182576fda6f9
SHA1 3dbb2ee808f116802f66772d81c26051eaa354d0
SHA512 26a1486c17800b8a44bc42de7c2105867f146b8ea4a6fd67ceb292e4446a70204e6966adf34045ca039349585b365fe83e5ffc020d08cf7d395d1c8406b1bbd3
SSDEEP 12288:O1xtwrXbCfgD1IxSuDehoYi8ut+wVCg84WzmNCdDjH5WONVfSQfclr8/Rw0F:mtwrOfgpfusob/f84WzkuD1FVqQ+8/Rb
MD5 SHA1 SHA512 SSDEEP

RFQ Rosemount.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5d73a302ff09dd9d39420703dc50c9530ac6e78b55c762f9c03df76be39d6c2c
MD5 58f2fc9e3b1e045d4f6040e0b15e7b3d
SHA1 3fd996467fc1b057e9f0fe436dd7f46cf460e688
SHA512 a4d0627fedf36e64aca0dd5154189d0fd280f212adc8e700c3e01ce6a4fe818454b7f3afe79ae37d45b990573be9eaf8d9d3ef58aed2cb19f27d66c64c94d044
SSDEEP 24576:l7rkW5oaXpcB7mVSaccPuvcd5OGQT/1/0nS+7n4SYwqK4zf3RTsAHWAgqChJ+huE:lbiecHHgtrszyaNQuiNB/e
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1263998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

email-html-2.txt

SHA256 99a61ab8c8cda6c13a67716ae9b9fbe7a055d56265e241498f05b0f7461c335c
MD5 bd15600d7bef64d0038e3c93bfa7c168
SHA1 60f772d024b5e403bfeeb666362beb8845a29cfd
SHA512 a26c2663a957b5bf7409f677df11e886d7e02e513d2ac94158477bb3d0aa06fb90de3858051428f9e6dffe15969f2228e5f884b3984021f9f1a8989bebede49f
SSDEEP 1536:reYOeYceAewoAFeYteyeYYdeWeLe6eLeDxeyoee9e2eN:XL
MD5 SHA1 SHA512 SSDEEP

email-plain-1.txt

SHA256 69a11858afafd585e45c70e1bdc41ecc1fe08155c1833b62c0501a0efee87601
MD5 5881601a1f93251d4226f606ec94907c
SHA1 ad4e7388518e047b41cf10bbbd77261cc4065049
SHA512 769c1f3e7de4089265e404989558d59d344e539b47acb91d37c2b662179e061421bdcab2980ad326d267f6dcd4d1d28c37905f192e8db2db0004801c25f92462
MD5 SHA1 SHA512

image.png

SHA256 0389d45cf0fdd4cb381a3e4726bff129ab423e0eaf3cefc7dbaee666d578fcb1
MD5 db7a2ff9f6ce9437bf2e206a4f5a996c
SHA1 a65aa7a6ca094d43e622ebb3cbf6ca240ca7739a
SHA512 70786f4e9bedef31b82fb5cfb73a10144de6a3088b12fba4ccbd7ef746b1ae31cbedc5ce5a7de2f8d53c3a98a4367cb447843c804ab1a9328c2815931428da8b
SSDEEP 1536:HNSN6IXP1GNYnaB7yFoQ6Ry3kHjiz6rz2OlncSA3R+I:u6I/8qaBiURyUHjZ2Oln8MI
MD5 SHA1 SHA512 SSDEEP

66620284ba61a3f8c2c5f4ed7dd8e7cb

RFQ Rosemount.rar

RFQ Rosemount.exe

mscoree

dotnet

email-html-2.txt

email-plain-1.txt

image.png

Sharing

General

Malware Config

Signatures

File Explorer

66620284ba61a3f8c2c5f4ed7dd8e7cb

RFQ Rosemount.rar

RFQ Rosemount.exe

mscoree

dotnet

email-html-2.txt

email-plain-1.txt

image.png