Static task
static1
Behavioral task
behavioral1
Sample
RFQ20230821.exe
Resource
win7-20240611-en
General
-
Target
228a940d454f6063f68df626ded4a7f844aab95c9dee9c3d6f65a96393466625
-
Size
603KB
-
MD5
f816739e575c188490318dfd68a21f45
-
SHA1
14df88cacc33294311cff982eb467ca3a1fbc22d
-
SHA256
228a940d454f6063f68df626ded4a7f844aab95c9dee9c3d6f65a96393466625
-
SHA512
8d086b15198b6f511e7f373afa0699bb48d9933c5e6626aa049e12436cc14e029f14acb32b75e02091aeabf44ce638deed369fa2db08225c5634e603124e3795
-
SSDEEP
12288:RP8Tldh/QbHlb/NAGgzLPZt/kyjwzOZ7dGvqeqJc9eM5+xa:Ze/wHRa9zjZZJr7dGvRqJBM5+c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RFQ20230821.exe
Files
-
228a940d454f6063f68df626ded4a7f844aab95c9dee9c3d6f65a96393466625.zip
-
RFQ20230821.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ