Static task
static1
Behavioral task
behavioral1
Sample
RFQ# 1000735894.exe
Resource
win7-20240419-en
General
-
Target
RFQ# 1000735894.exe
-
Size
665KB
-
MD5
c31d914451c7b7417d6dc961d9554307
-
SHA1
9a6734273004e6fae64fbc46591ddf4253cc094e
-
SHA256
5cd0843b990576cd296b0a64896c77d2fff223e6a5e223110f22ef810666dc93
-
SHA512
8ac5dfe0e59023b8e82f05f02b0ce0dc41b510d0e2ede20bb24420ded826588cfe39b085326c20cf07db68e9acf65c25d95f541df583b62357bda6325bef45ec
-
SSDEEP
12288:YZsBd3657p/8DL+hvxG20RjtU2bNC2+9ojgCAKpS2YQjbEJs4/QmmJgpS7wtO:MsBd36UOhvxG20RJU5V1CAqdYQjbGs46
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RFQ# 1000735894.exe
Files
-
RFQ# 1000735894.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ