RFQ#060524[.]exe | Triage

Sharing

General

Target

RFQ#060524.exe
Size

711KB
MD5

2546999bba9b5debdbf3bdff19c00a30
SHA1

a72e12fa392f9d5588e9362cb6351fe593043e92
SHA256

966f683a0580f7d052c49ebda86cb0fb3ea22199fa37698cc0e0fa7ac5a9a95f
SHA512

8dfe74da8a820a2e43954e91aa8efbc4d88ea66622b4c6e90774a5226e17396bbcddb70ff7f40336de2b2e48191535249e0fdc9ebf6779b0aacf792c86859ce9
SSDEEP

12288:4EXiAEfDTOmIlE4LIPls0WiwaDk4SGaOvvQujFkpZSNoHVFoVka2gn:3RE7Tz0DRLaDkLGXvRjFiZSeHVWVRn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ#060524.exe

Files

RFQ#060524.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cjQb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 694KB - Virtual size: 694KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ