Reiven RFQ-04032024[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Reiven RFQ-04032024.exe
Size

95KB
MD5

8696397420d9ab671ce2c679499232f6
SHA1

61a529e48a063233d712ea559e819c62d9dcbf7d
SHA256

ce8cd744eba1aba5e0833127c89cc56a047b09638714b3086cb707f6d863b9c0
SHA512

d0d7f12c5929e8418920103613ea3d446ca2239ed8f210888bb0d2c6c966368daacebab910d6f2bb6430518ecd7bf2fddbaf2300edea51ac90f5fd36e5ea4187
SSDEEP

1536:L0xpxeL928CGyO7mpUlFpKZqdSWfpwy+Cz7bWXgN2pbiPL8V45xEDsDxhDyhNdi2:0ORSO7mpUlFpKC/+gN2pZOxEDsDT2Ti2

Score

1^/10

Malware Config

Signatures

Files

Reiven RFQ-04032024.exe
.exe windows:4 windows x64 arch:x64

Code Sign

05:3b:9f:ff:cf:08:d8:7f:81:1a:90:d0:fa:88:7f:76
Certificate

Issuer

CN=Microsoft Code Signing PCA 2025,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2024 14:15

Not After

04-03-2025 14:15

Subject

CN=Microsoft Code Signing PCA 2025,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:c4:84:ff:55:ce:d5:cc:50:6d:a5:2e:0f:6a:90:38:ad:d0:35:07:12:e5:ff:13:5e:61:65:ec:6f:2e:da:1d
Signer

Actual PE Digest

e4:c4:84:ff:55:ce:d5:cc:50:6d:a5:2e:0f:6a:90:38:ad:d0:35:07:12:e5:ff:13:5e:61:65:ec:6f:2e:da:1d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

05:3b:9f:ff:cf:08:d8:7f:81:1a:90:d0:fa:88:7f:76Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

e4:c4:84:ff:55:ce:d5:cc:50:6d:a5:2e:0f:6a:90:38:ad:d0:35:07:12:e5:ff:13:5e:61:65:ec:6f:2e:da:1dSigner

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 23KB - Virtual size: 23KB

.rsrc Size: 65KB - Virtual size: 65KB

05:3b:9f:ff:cf:08:d8:7f:81:1a:90:d0:fa:88:7f:76
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

e4:c4:84:ff:55:ce:d5:cc:50:6d:a5:2e:0f:6a:90:38:ad:d0:35:07:12:e5:ff:13:5e:61:65:ec:6f:2e:da:1d
Signer

.text
Size: 23KB - Virtual size: 23KB

.rsrc
Size: 65KB - Virtual size: 65KB