44012f74fea0adc924ac4d0af2328f6dc1e5f39b6e262a74dfaecbbf1ad983fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44012f74fea0adc924ac4d0af2328f6dc1e5f39b6e262a74dfaecbbf1ad983fe
Size

839KB
MD5

560a575f708a0f57f6c8352b855057ea
SHA1

492e08768cdef621fe5f1a4af95908010ab12f7d
SHA256

44012f74fea0adc924ac4d0af2328f6dc1e5f39b6e262a74dfaecbbf1ad983fe
SHA512

b0e568056f8d381bd542e700d059150a35e3f324e343c7be1e228ba56ea5dfabe8f79b7a021ea491ffb93e602413040e11a9c6d8d171b05e1561e90056cca52b
SSDEEP

12288:SsmdQYfUwH8URaC0uHsuBKd/b5LMcm5IoQsxyI67zyRHiV502TxxG3Z:SsB4BHBaCl0FBRPuRCV9va

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ-LK120618-459 .scr

Files

44012f74fea0adc924ac4d0af2328f6dc1e5f39b6e262a74dfaecbbf1ad983fe
.zip
RFQ-LK120618-459 .scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ