RFQPRN1020500-ME_REF[.]rar

General

Target
RFQPRN1020500-ME_REF.rar
Size 337KB
Sample240404-ramztaad26
SHA256 074a00a995ea96124301b5664c43e6a1389058909ccdc7e8d3204ac9a7c25d07
MD5 74b0a829fd2eaa766e19f4cae5e0175c
SHA1 6b72c13824dbb8efd952689a3347f8cf95f75ea4
SHA512 22c80c6cef9c92004c97659481250644dfa795b3a4480d8a63f0fda378333e31e271c7a3440643aa29ab87fc3ea4752e7a68ff12cecf5cd9146ff0a5bbad066a
SSDEEP 6144:jMCMO8kcNku8AxrSfO3qOmaqslkVgX6U/yjdF/uvNRMLYMNPOyKoQ0U4oqOirJf:jTMscNkucO32LgX6e6mFRMLYePOyKoQ0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQPRN1020500-ME_REF.scr

File Explorer

RFQPRN1020500-ME_REF.rar

.rar 337KB
RFQPRN1020500-ME_REF.scr

.exe 459KB

RFQPRN1020500-ME_REF.rar

SHA256 074a00a995ea96124301b5664c43e6a1389058909ccdc7e8d3204ac9a7c25d07
MD5 74b0a829fd2eaa766e19f4cae5e0175c
SHA1 6b72c13824dbb8efd952689a3347f8cf95f75ea4
SHA512 22c80c6cef9c92004c97659481250644dfa795b3a4480d8a63f0fda378333e31e271c7a3440643aa29ab87fc3ea4752e7a68ff12cecf5cd9146ff0a5bbad066a
SSDEEP 6144:jMCMO8kcNku8AxrSfO3qOmaqslkVgX6U/yjdF/uvNRMLYMNPOyKoQ0U4oqOirJf:jTMscNkucO32LgX6e6mFRMLYePOyKoQ0
MD5 SHA1 SHA512 SSDEEP

RFQPRN1020500-ME_REF.scr

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3732bd99c86b628c57f8dc0c225d866f7778de1f31bc730055a72be7c13d0883
MD5 d46936f81f9fe2cd3cadf6d3094c3718
SHA1 cf141421f91054ff2562cfc8148ba3beed58f969
SHA512 55eb8c8eeff47839a2b7d3a8747e840c5e9d5b8d9cc8c52c0280085d1c1dd3ca0758135c329eef72108d909f0e66ab7328341b042f31797a54f7d0bf96afb937
SSDEEP 12288:VUiob7SFP3MMYLi4uy3I444644444444444444444444444444444FHcLy/Ed7We:VvobOFsjHcLycdOCSTl4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

475518

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

RFQPRN1020500-ME_REF.rar

RFQPRN1020500-ME_REF.scr

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

RFQPRN1020500-ME_REF.rar

RFQPRN1020500-ME_REF.scr

mscoree

dotnet