RFQ QUG24-2003700542XXX[.]7z | Triage

Sharing

General

Target

RFQ QUG24-2003700542XXX.7z
Size

655KB
MD5

dbbfce68bb8b30fb886d9d0bcfc04b6d
SHA1

a02dd8e894da0bf89fac90120bf728aad1626e1a
SHA256

731f8467492e53038d6e0ee012349433beb55070b7dc9efe94ebca5441c92997
SHA512

9475f374d1a4c2839d2ac43035fee05708ed69d4f443fc5bfe997e25cf83a18ac944505ce40ba9a23eb561209bf5dd9fac4a432227c75a298a6b46bd50a40aa7
SSDEEP

12288:6oRq1ztg77Itzn58j0bLJAPs9/sHBqRvZUlOpOWJ:6okzXtz58j8LJAPsxHBUlO4U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/RFQ QUG24-2003700542XXX.exe

Files

RFQ QUG24-2003700542XXX.7z
.7z
RFQ QUG24-2003700542XXX.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Tqwc.pdb

Sections

.text
Size: 733KB - Virtual size: 732KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ