RFQ NO | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ NO
Size

771KB
MD5

22ec5e7b2669f38bba5fe4965ceb62fd
SHA1

d4bbc3fea69d66946b872bc90fded7f77d55a4f3
SHA256

c1b678d92f7283392ee44c588e8af6b6cfc995a2301c6f1c7c350ea1ab549add
SHA512

ce9f1406f6a5c0383266319d9093a129c78b56b0d093eb41ecacbd6d10a43339e0a1c0ad7e42007b2862589dbafea0986f186685250230c3c34ed0c2ecea9945
SSDEEP

24576:gZp9xkyGgCkpBFPf0JawfSYeQ/DXVehikd:gZpPfCKBFf0JKS0Ykd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ NO#1145009.pdf.exe

Files

RFQ NO
.rar
RFQ NO#1145009.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ThoYE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 974KB - Virtual size: 974KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ