General

  • Target
    RFQ Commercial Doc_935750101.exe
  • Size 635KB
  • Sample240402-v29jnsge3w
  • SHA256 2a597efb320aa3623d1334017ab18e1df8a6d25ae5455dd735ee20072844bb38
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • RFQ Commercial Doc_935750101.exe
    .exe 635KB
  • Cooees/Domfld/Hydrater/Aftenkjoles/teda.txt
    577B
  • Obelisking/Testpilot/Polr/Behandlingsmaal.sac
    333KB
  • Obelisking/Testpilot/Polr/Kliniklokalernes.sun
    392KB
  • Obelisking/Testpilot/Polr/Potatory.rea
    269KB
  • Obelisking/Testpilot/Polr/rias.spr
    .ps1 59KB
  • Sightlessness/Hollnderen218.Tyv
    318KB

RFQ Commercial Doc_935750101.exe

  • IMPHASH f4639a0b3116c2cfc71144b88a929cfd
  • SHA256 2a597efb320aa3623d1334017ab18e1df8a6d25ae5455dd735ee20072844bb38
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
2e:21:c3:f9:1c:b1:62:08:ea:b3:42:45:7c:20:c7:43:11:59:44:06:aa:47:c8:5f:54:7d:f5:10:30:bb:ed:08
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=hemateins,OU=Inerasable Superfatted\ ,O=hemateins,L=Slip End,ST=England,C=GB,1.2.840.113549.1.9.1=#0c1845676574727373746f6c65734074657270656e64652e416d
Chains

Apr 2, 2024

Minor OS version
0
Major OS version
4
Entry point
13564
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths