RFQNO2324[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQNO2324.exe
Size

852KB
MD5

66f02634e9d675fd0d79f52c4959457a
SHA1

8677e1f88e5a97825ada0284e6450037a8e76509
SHA256

774dc970acd014cdd4fcf9d4e31e3703d2694e2221d63e7a98f05e02a174ccb4
SHA512

744add55bb29ec5c62bb6e7b366da8a671d0f3a3db0e68bdd7f04494b3ca0891c51991b8f536d71a190c5ee70f913b1470a27cb8e92b97bc425e954868e5650a
SSDEEP

12288:0+tT5oGybkWuruRPBb8qLPQfXaPgy1lWeRu0NQMlmNnT/RpXAlTJkw7BjZ5Q:0mFoGTpAJjGaPPWeKTJpwlTym/Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQNO2324.exe

Files

RFQNO2324.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 850KB - Virtual size: 850KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ