Static task
static1
Behavioral task
behavioral1
Sample
RFQ NEW ORDER.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
RFQ NEW ORDER.exe
Resource
win10v2004-20240802-en
General
-
Target
RFQ NEW ORDER.exe
-
Size
114KB
-
MD5
44f935072ed1882ba43ec8e7880f87e6
-
SHA1
7e0ef13cf0a0a0a3eb3d3c75f18f7c334c9a7530
-
SHA256
dd30431b2ca673871ea7c4371cf43738937e2ad20431b496e44225bd1d7318d1
-
SHA512
71d5204f73e3b0c9199795ec0a364f54e37e846f33abafa20f4a6ccd03785def3cbf05e6849e3119adb619ca63a5fb4a5a06399b5dd2cdebe02a29bfc0e67ee1
-
SSDEEP
1536:jOVtXzJZJ7QmMeMkW+1tMOKhuwRnnDwxY6M:SXzJZGYObIunnDwxY6M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RFQ NEW ORDER.exe
Files
-
RFQ NEW ORDER.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ