RFQ[.]NO[.] S70-23Q-1474-CS-27-24[.]lzh | Triage

Sharing

General

Target

RFQ.NO. S70-23Q-1474-CS-27-24.lzh
Size

902KB
MD5

e6508e0743f2608d120d3aa073cf9c22
SHA1

bd190b38fc0c9768436575e27d1823381a1c9710
SHA256

63b964bb4e623dfcea2b54ea8cfccdff858ed88ec96bc37260f41f560fc3b431
SHA512

a421384b817793d792564a59c22b73a281153870991b9ea23bed902cd3b23796d92626555ee473404a88308eb2d3931e7ae5712fdd3f5739339dc93617b70522
SSDEEP

24576:QHay53O6aQDcYYH2d5MgHtkst70ka+AZcbKdF3mXAZFAsb:aV53XaicYm2XHHfa+6cbKdFeSAO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/RFQ.NO. S70-23Q-1474-CS-27-24.exe

Files

RFQ.NO. S70-23Q-1474-CS-27-24.lzh
.lzh
RFQ.NO. S70-23Q-1474-CS-27-24.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ObgO.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 927KB - Virtual size: 927KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ