b9f580bbbaa27ed075966b9de2c0ec938a6c5fbde3772fcc936e2095ca5a2235[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9f580bbbaa27ed075966b9de2c0ec938a6c5fbde3772fcc936e2095ca5a2235.rar
Size

738KB
MD5

ed08d1857280f2c663988be700d61aae
SHA1

2e58c09b515b1ab38f583b534d56926c638a5d01
SHA256

b9f580bbbaa27ed075966b9de2c0ec938a6c5fbde3772fcc936e2095ca5a2235
SHA512

9a2adb481bfa894c80d85497afd40e05af6f89363a3c77e1e56d4ce329311667f631a4b9b36d5e2deffa60adad58e51b4a29f2abba2ffd326a1cd8abd0952b61
SSDEEP

12288:VFuRIpt2IMWhHCVKIGK8iLKoyfVqWe7qXFYWIqQSsfNNMUUjtgRQ9:zFt2AhiVKDA/We7qVJTptg8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ QUG24-200370054200.exe

Files

b9f580bbbaa27ed075966b9de2c0ec938a6c5fbde3772fcc936e2095ca5a2235.rar
.rar
RFQ QUG24-200370054200.exe
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 754KB - Virtual size: 754KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ