Static task
static1
Behavioral task
behavioral1
Sample
RCRFQ-FEMS(HKL)2024024.PDF.scr
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
RCRFQ-FEMS(HKL)2024024.PDF.scr
Resource
win10v2004-20240802-en
General
-
Target
RCRFQ-FEMS(HKL)2024024.PDF.scr
-
Size
695KB
-
MD5
f3094a481b9ccfb22a1cfed698b898c1
-
SHA1
045e024f21dd5ce4b2816ab387b1581da0e3b100
-
SHA256
6cb3801298e866cd728d92c70e20130f3149b7b7e9ab892c77f50503647380d1
-
SHA512
1b5910c06d1089d422c7de6d32c751e898007946a51028d914cce876724221bb0e451c7acc0071196ca802659678e19809a8595fb183d56922e0ec0d4a83b3a8
-
SSDEEP
12288:aVVxz9wxQPVSlYoNzf5sDqlGdbEHyCl9Qzq4ldie+Yu:sxz9czlYoNrTglE/Htyx+Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RCRFQ-FEMS(HKL)2024024.PDF.scr
Files
-
RCRFQ-FEMS(HKL)2024024.PDF.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 688KB - Virtual size: 687KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ