REQ-102[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

REQ-102.rar
Size

588KB
MD5

bac7dcfc4f1a2ab011cf5e7bb7f25d47
SHA1

113b9ebf38182ab007d71638ac283f0419cd15c3
SHA256

dd82066c688d81cd40cd1e83b7c174a0f1f78fc27d7f20d0d8ee5c27899bc30d
SHA512

a3d5f8bb32de6a3dc42f5611735d5b1f52f86598db6f170201a4c17ab6c2af7d99c72709bcd250e6534411bbe0736541c5cfdf94953c86e026e96595351ecdbc
SSDEEP

12288:gwK8edctZNpH7DDwXxQ7ursuRc3UBY8fKdNIVTiq9A81uSSKAMc:gwedctZL0xQ7urpR1LHVhA83I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/REQ-102.exe

Files

REQ-102.rar
.rar
REQ-102.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fcpH.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 617KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ