Static task
static1
Behavioral task
behavioral1
Sample
RFQ.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
RFQ.exe
Resource
win10v2004-20240221-en
General
-
Target
RFQ.exe
-
Size
29KB
-
MD5
488d5fc58606d44b727b39018ce80f36
-
SHA1
838a86506d0d2b4b2b8319f67b50d25081ed8882
-
SHA256
5089cf4bd4e365cf36a0349fab4ea6feb9c3370630314a7042e9f1e492dc7720
-
SHA512
9840ac60ddd9076933cf69ce2ae9f90d1aa94c2a31a6c54a26aba7e74ca3d56921b47652ac6ab7cf14bac906478cf266d2c4e08f4338b92e84967d80f315b675
-
SSDEEP
384:MUaBcTGFo/Sp7ANkCLuiLf0Z8bpK3P6IGI0W0IZQ66i48bTKOZ4PIWPMhn1jKV3v:7DDLf0ZiK/6NIrJQTzuuuQOA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RFQ.exe
Files
-
RFQ.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ