Static task
static1
Behavioral task
behavioral1
Sample
RFQ 412.24 10.09.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
RFQ 412.24 10.09.exe
Resource
win10v2004-20240802-en
General
-
Target
18f8405901e338292f4f15c29face7f788964a94b3422d7c2b4f3e9d50fbdaf1.gz
-
Size
829KB
-
MD5
8280999c6dfd7e79d7b98fcd1158959c
-
SHA1
47c551a9a056f9d37135fb01c15416980665a506
-
SHA256
18f8405901e338292f4f15c29face7f788964a94b3422d7c2b4f3e9d50fbdaf1
-
SHA512
fa8044adc41d90c63398b5b0a3f6200c89fd220cd08e36c749e70cf3251a4b11b9d9e390fd22d86731e573a804f30aae7735e8b958a75594411c71e4573a0a56
-
SSDEEP
12288:iv0Hf02CL3WchbrpWWyA41BYixrHjLec2+gH/okSK25b6Oes10ItT4mF9uRZM:GcCLRPphyA4cikc2JfPSbpbeRIt/Fgq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/RFQ 412.24 10.09.exe
Files
-
18f8405901e338292f4f15c29face7f788964a94b3422d7c2b4f3e9d50fbdaf1.gz.gz
-
RFQ 412.24 10.09.tar.tar
-
RFQ 412.24 10.09.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ