36f4314441bd94a494e1a46aad02f35274f4140f87c3cb4ae4033231dfda503c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36f4314441bd94a494e1a46aad02f35274f4140f87c3cb4ae4033231dfda503c
Size

662KB
MD5

1257adc0750ad73839ab9220f2abc8f9
SHA1

973f15e6cb8fceb361fcea14b5c15b6a995c026e
SHA256

36f4314441bd94a494e1a46aad02f35274f4140f87c3cb4ae4033231dfda503c
SHA512

82927e8c16c699e9f74f52d5f9be3e0bb7d46f41015fd9dff2e2c8fb508b8d5f469365611c66c772e48f020d145bfdf8dc13c41944e8fe714f946db8e91f9719
SSDEEP

12288:TfOf2iyjO/eNOp73VSYne2U1NqIkrcA/cUpylEzuTIZK0vJlsVCa:rq1+keYrl/ubkwycUpsuK0vJlsYa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ.xlsm.exe

Files

36f4314441bd94a494e1a46aad02f35274f4140f87c3cb4ae4033231dfda503c
.zip
RFQ.xlsm.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

YZUn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 689KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ