Static task
static1
Behavioral task
behavioral1
Sample
RFQ-Al NASR-00388.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
RFQ-Al NASR-00388.exe
Resource
win10v2004-20240802-en
General
-
Target
05092024135904092024RFQAlNASR00388.TAR
-
Size
601KB
-
MD5
3453beef789e48164fe79699d189e938
-
SHA1
6cf4d9fac59ebd3b96815188adf656c2adc9c579
-
SHA256
f8e0c40c73b254fabb324d43f617db47f3d1d82c44c4802d66d2949623eab44b
-
SHA512
614efbe0079811f8452a7175510ea58d69d52e67942dc36f9174e03c39b0236020cb117f46293a795a545242fe4966e314b86a5be5448d010f24f13f784f4ee7
-
SSDEEP
12288:klVfDyGb8pb6x06AFDb4aEYsQo082Mmoqq7veQlIytY9Z:VGOb6xbmD0aY5H2Mmu9q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RFQ-Al NASR-00388.exe
Files
-
05092024135904092024RFQAlNASR00388.TAR.rar
-
RFQ-Al NASR-00388.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ