RFQ (#17092018A)[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ (#17092018A).rar
Size

815KB
MD5

aaffa22f15253659653b372468d9b0c8
SHA1

bd6eb9dbe36d1583e80be439fb2c54dc0c74b4fb
SHA256

80eebbae9526c0e9ec411d05393f64bd1da7da6453d0178644aa187bc698ed15
SHA512

5cb09217769af756e2bb61a05755766f95bc28a07a6535f5fd5a2130936f9006859c9d1633984cc0ce24ae1fe4c623ec64b23d397eee0eeeab4403e31c8253d6
SSDEEP

24576:Yu02G3I8GGDOnktMrTzUR0u/LfZaWwP2is/Ke:Z7GD5Mbj0RaWwP2H/Ke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ (#17092018A).exe

Files

RFQ (#17092018A).rar
.rar
RFQ (#17092018A).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1017KB - Virtual size: 1017KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ