RFQ QUG24-200370054200518[.]exe | Triage

Sharing

General

Target

RFQ QUG24-200370054200518.exe
Size

2.5MB
MD5

2c797c56fd3f57bfdcad4eb7031733f6
SHA1

4f17ff83965d5d92d2128e7bea446052d5b24444
SHA256

53a5dd5f5446a75a32253a1f365e891e4c4a0cca5284eed39b36737c7fda4000
SHA512

8a39d1c363b2f1d676730fb6d23d837a30032eceebdebc173644336bf1a6c3a45a7406d8d174f331d3f0d9ef373bd5fa8758485bbfec644664357c762854d6a3
SSDEEP

49152:0IMweBemgQmy2tmQjnRO2AJ6896tWieZ0s:8Mm2yvQjnROp685

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFQ QUG24-200370054200518.exe

Files

RFQ QUG24-200370054200518.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ