New RFQ[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New RFQ.exe
Size

701KB
MD5

f082b57279dc51d84eccff9542da8c98
SHA1

f099de88dcdc8485e40e2e31886e84346004d286
SHA256

f1d18359bfd91d436437dc5c6055e5d98f72035655ad421cd66e20cd9c97ea60
SHA512

ba19c4fded05641b3e36b61de613a156cc01defebbd0e66ddb7ebff724dd581e9c6a4f0a66e9818f335cc366560909af26ceb3826f77490a1511c2e56b3aef4e
SSDEEP

12288:bp19Kt/rFfasUByh6ksZ51Fh/p7aaj5i/7dPozt5wWKDYp8buyMtfHIMCanlU+kk:tKN5ishY5LppGw0stqWPp8bFMRuMSk6q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New RFQ.exe

Files

New RFQ.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mQgv.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 698KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ