11072024_1657_11072024_RFQ-BFDGEWS243ERFQ[.]Gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11072024_1657_11072024_RFQ-BFDGEWS243ERFQ.Gz
Size

552KB
MD5

8e33e09d296548dbef01cf2503f32070
SHA1

4396b07be9204efe22ec550719548f2afb575a4d
SHA256

9f9a5fa68e957c119deeea4dc2d15099862a090a0ff3a7cca84c7f13d079fd7c
SHA512

0b3549ecdee04a86212930ac30b960f9e8c75b9ce42174e1742a5ec56e6264f0e5bd788beb971ab547e8c05893a6f6491afff6f00b5f6c76bc400559d901b912
SSDEEP

12288:Zv62c0NfP4/XTMpoSaH2Ah/5tSxcGyCnK8JU4YSO6q:Zu0pPeMp5y2AhTPTp8JV2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BFDGEWS243ERFQ.exe

Files

11072024_1657_11072024_RFQ-BFDGEWS243ERFQ.Gz
.rar

Password: infected
BFDGEWS243ERFQ.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 590KB - Virtual size: 589KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ