GUGHE3EDED RFQ[.]exe | Triage

Sharing

General

Target

GUGHE3EDED RFQ.exe
Size

1.0MB
MD5

f64148b83fa4fc1bfa7b09c0e9736fe9
SHA1

0e53f205122ae6adae8dce0fe711663318ec97b5
SHA256

eb07f292e4a46ad121d85bac9bea91ab03ffb795527d7c1c1047e7312ea597c0
SHA512

2a99eed471562a12dea53e13960acd33ea519f0d887315d83eef4f9a38e0742aaeeb6398a2c93b3db8ffff9db05bfa667018d27b7b80d3182080e9d96195e632
SSDEEP

24576:0E3olMBfwoq7CTurSI/IvFcW39FDTI8G/merMa:0E3ouZwoqzrdQviW3nXI8G/me

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GUGHE3EDED RFQ.exe

Files

GUGHE3EDED RFQ.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 938KB - Virtual size: 937KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ