RFQ#1047[.]exe | Triage

Sharing

General

Target

RFQ#1047.exe
Size

619KB
MD5

6846f1fb78fad5224b98b0137e7a862d
SHA1

f40fa249d6464ef5c1f9e39748162fd5d70e7aaa
SHA256

66a0cfa14afdb23dec776fa355b9f89551405989b9838db6398c77ee6c73c084
SHA512

dce3134e45ba2a21efcfb4d3f4080dbecdb98d4dd4dafafd7f87daea5822350aab05dd0148b6a53e7ed7e8af26db7ee6a89de6312d1ea921b81f5a10b20326dc
SSDEEP

12288:tnteikJg6ZUpq4BRAa0yTow0ADZVY8HnvcHEx0MTOw:3eBJgxpq4B+adowrZfnvckG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ#1047.exe

Files

RFQ#1047.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Gqwv.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 617KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ