rgBh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
RFQ for PR-10453180.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
RFQ for PR-10453180.exe
Resource
win10v2004-20240226-en
General
-
Target
9ba2ba3e23597f379b8e5e3b4fcc283ab9902e453926c037ff8a12c7598d80f3
-
Size
665KB
-
MD5
3934acd77c3632c97008b9f981dc4b23
-
SHA1
b33c0d4eade541c9091c6d05453882d42d76e247
-
SHA256
9ba2ba3e23597f379b8e5e3b4fcc283ab9902e453926c037ff8a12c7598d80f3
-
SHA512
38a6adc453f9325830be8e2aaa22d011a3cbc34de4c7e5e1af943e054b67445529a3b4316171e525d7c9b738035bf2e96773f7d8e0bf2fefae7cbf188c1f9da5
-
SSDEEP
12288:HmXFRgdocGObff1Rqvv24UlTOqa2Dp+oIEOGB7Vjiz701FBViQDkixifeG5EOt0y:qJObn1RqX24qFwJE1izI1Ds86eG0fZ0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RFQ for PR-10453180.exe
Files
-
9ba2ba3e23597f379b8e5e3b4fcc283ab9902e453926c037ff8a12c7598d80f3.zip
-
RFQ for PR-10453180.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 973KB - Virtual size: 973KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ