General

  • Target
    RFQ;NEW REQUIREMENT WITH PO.exe
  • Size 4.6MB
  • Sample240510-pcqsdagh38
  • SHA256 29a30186b1e30d369c564e680e8c6f90bcacf14c442090837ad9ac0955484cdd
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • RFQ;NEW REQUIREMENT WITH PO.exe
    .exe 4.6MB

RFQ;NEW REQUIREMENT WITH PO.exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 29a30186b1e30d369c564e680e8c6f90bcacf14c442090837ad9ac0955484cdd
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
d6:4a:b3:05:0c:3b:55:a5:89:d0:25:4d:05:55:03:94:c3:b2:26:bc:5a:65:e3:e9:25:3c:00:0f:6b:80:fd:64
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=PDFescape,O=PDFescape,L=Encinitas,ST=California,C=US

PE Signature issue

Digest
48:19:7c:58:1f:9c:61:1f:77:30:61:20:67:18:23:eb:a4:94:d7:b2
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=PDFescape,O=PDFescape,L=Encinitas,ST=California,C=US
Minor OS version
0
Major OS version
4
Entry point
4604922
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths