57fc9b56b7887f6e0fd20e60199d0123db28f2051abfabf7b924298c276cdf91 | Triage

Sharing

General

Target

57fc9b56b7887f6e0fd20e60199d0123db28f2051abfabf7b924298c276cdf91
Size

904KB
MD5

79179e3daa877d62be667f3988288852
SHA1

2ef6269d1409c8f97451b102de61d36eb57bdcbd
SHA256

57fc9b56b7887f6e0fd20e60199d0123db28f2051abfabf7b924298c276cdf91
SHA512

8c9c733a057450dbe9f00c5d15ea21eef7651c77b090383e5fcde16a0eb3cc25b2bf3c37e8ff3a0a578032f8f03dc4f4b388d8d9c1d0ba8aa76c91bb18f16acb
SSDEEP

24576:fieou/IyWCqJB2N0tKYqupjVbRPcUnzMyPLe2Ae:fieouAyzGB2RYqspxcMzhPLe27

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/IT Gadget_RFQ.exe

Files

57fc9b56b7887f6e0fd20e60199d0123db28f2051abfabf7b924298c276cdf91
.zip
IT Gadget_RFQ.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

LYef.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 972KB - Virtual size: 972KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ