RFQ PO-O849434386634629I9865O4236OIO35965O94I528[.]tar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFQ PO-O849434386634629I9865O4236OIO35965O94I528.tar
Size

562KB
MD5

a3efee541a2d55ccd78105628e3641d6
SHA1

a7aacc77121bce0dd6a1a6a5211da9bc9b9bfc67
SHA256

2c4039b7607aed05faa92ce87ff773f03a5943f236d3fe1c05634d55e148e4a8
SHA512

fdb14384952ff6669f87ca0a8c395e9ec84d500a5c9a9584a9e61e7210887b3d55196ffd41cd6a94a5c91e9b3ff124c9429c8f6a384cf09273d0da31678abfec
SSDEEP

12288:c/G48VL0vMNnIR6QPxJcZ2f1g4WkmZSbqm0967THDNftvbZGV1CmtU5Nvuv:c/WWgqPxJcZodqm096fDjv1Qo7Gv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ PO-O849434386634629I9865O4236OIO35965O94I528.CMD

Files

RFQ PO-O849434386634629I9865O4236OIO35965O94I528.tar
.rar
RFQ PO-O849434386634629I9865O4236OIO35965O94I528.CMD
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 590KB - Virtual size: 590KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ