Static task
static1
Behavioral task
behavioral1
Sample
RFQ_TSL104.20221024_pdf.exe
Resource
win7-20240508-en
General
-
Target
RFQ_TSL104.20221024_pdf.exe
-
Size
3.5MB
-
MD5
52d4890bb4833c61e2055a8efe203c35
-
SHA1
1c26ba068c0a9a13cda6f5fb2c5071dd2bcdad50
-
SHA256
d3b12d28277fddfab274c465682ab08c526a9046a841bb6762199d6d71e70bc8
-
SHA512
21be603d601688e7b9532fc36c649c8f7f06dbfd637ddfb5b8cafc07e0dfd49fe17cbbfa1d8db613abc8f006d6cd0e1d1cac4f2e1a527b3adec898525b687a5f
-
SSDEEP
12288:m4t49Q01HrrwI//XbFhvOtD3D/3jeCFZO5TXXSHkPo9Z24tuREU4FgUFrkHBzyOl:6b3bGT/R/eXiHMo9447emr2Bmqr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RFQ_TSL104.20221024_pdf.exe
Files
-
RFQ_TSL104.20221024_pdf.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ