RFQ 2403[.]exe | Triage

Sharing

General

Target

RFQ 2403.exe
Size

589KB
MD5

23f2b134d5b7bce69858d4fe46e70aa2
SHA1

90f75b12b19e4dddab93fedb2da88bfacaf2344e
SHA256

bf7619fa136dc46e5612bdd8635e13618db486f01bb18716713a25b096331d30
SHA512

01ce8f2a22f18bda803c65163a9e034ca31c329c5a9c62e7f253fe69afe842e53414b1fc4753994fa4272bd270b58786537d3f16037711e9219dd9da2997e091
SSDEEP

12288:uQ8bQb9PnYoAMnmgQqdARAkgnChnt8w/zpTEKPUHL9ZBtrML9dS0DFy:uTIR0MagsgnCht8w/dTEKPU38S0Dc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ 2403.exe

Files

RFQ 2403.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

OVJR.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 586KB - Virtual size: 585KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ