General

  • Target
    Signed_RFQ_Order.exe
  • Size 575KB
  • Sample240123-mcy3msabd5
  • SHA256 1cb00eec4e790856cd41b150ced2cd44b04b67c6210745baaedadd3f3d4bb390
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • Signed_RFQ_Order.exe
    .exe 575KB
  • Borickite/Lydsidens/Tellys/Briksekvenser134.bar
    2KB
  • Borickite/Lydsidens/Tellys/Byzantine.mad
    20KB
  • Borickite/Lydsidens/Tellys/Gardy.txt
    428B
  • Borickite/Lydsidens/Tellys/Rindes.Gaa
    .ps1 25KB
  • Borickite/Lydsidens/Tellys/Tossehoveder64.bov
    29KB
  • Borickite/Lydsidens/Tellys/multarticulate.imp
    9KB
  • Diskriminationen103/udpantningsretigheders.arm
    43KB
  • Diskriminationen103/webber.kon
    8KB
  • Skippers.Und
    496KB

Signed_RFQ_Order.exe

  • IMPHASH 7ed0d71376e55d58ab36dc7d3ffda898
  • SHA256 1cb00eec4e790856cd41b150ced2cd44b04b67c6210745baaedadd3f3d4bb390
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
22:00:40:4e:49:98:6f:d7:b3:88:3a:bc:af:1e:38:15:b9:c1:25:8b:3e:78:e9:72:8b:f9:bf:93:9f:b0:1f:ba
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Contusing,O=Contusing,L=Diebach,ST=Bayern,C=DE,1.2.840.113549.1.9.1=#0c2249727265707265737369626c656e657373406f76657270726f76656e6465722e436f
Chains

Jan 23, 2024

Minor OS version
0
Major OS version
4
Entry point
12846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths