RFQ DO NO17665[.]exe | Triage

Sharing

General

Target

RFQ DO NO17665.exe
Size

751KB
MD5

ec30649f75893731006dff3ea5620320
SHA1

30d70f3e5b8a2136765ba2e3e330c2b2d0a73ac3
SHA256

0610f4eaa31b99c543cfe5c6036db65ff93b62f55e8309251db74e0d3efb087f
SHA512

3c6c1138f138f374602290a3f40c7f7412c44ca5a9b301ec535c720b1b0b87d3b2e16ffe5e2986c60ccbc844a4f857a6e8839f3b7d24ac20ca2e12e1ba94c3f8
SSDEEP

12288:haPjRWed/Y133A28bV0+hEQefS73XN2pMhRZBHtBhoPFhDRn0q:h6Bq33ypEJfS8pMh9HtBePln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ DO NO17665.exe

Files

RFQ DO NO17665.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

YTdw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 747KB - Virtual size: 746KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ