RFQ202402 PDF[.]bat | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ202402 PDF.bat
Size

669KB
MD5

fce16dc5af4c5068354464e754cb9a75
SHA1

93d7ae9a7e2e359c04f46c4d5f73f0e997967985
SHA256

099846444a8e28d999b69fefc28857282996958f286b969508a6f39b892699f7
SHA512

aa039956b884ce6e9743996e0e88930c8fa9a0f8a4198857c6884df3599ee02e439e5b98de4b46fe80975bb6477309c41e9c1556e6d377db72537acc25e60c09
SSDEEP

12288:WeQ5vzi/DngLicQXUz6LrJh6VUvoK/sJy9lhV+n8LD0gRxmf33F:WribgLiozoYCo7J+lTD0QanF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ202402 PDF.bat

Files

RFQ202402 PDF.bat
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

yDKPX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 666KB - Virtual size: 665KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ