NEW RFQ 101[.]exe | Triage™

General

Target
NEW RFQ 101.exe
Size 791KB
Sample250123-ydh9csslek
SHA256 d80246672d337713cd5dbae257d6cd81acdbb3b4328141a1bec0a735b9618d71
MD5 53e3ac443f485e6035881ecffe14d1f8
SHA1 8a088224664db33ebbc4a186639ee4d69b9e6a64
SHA512 35c4890a01c5a560098c7edcd88bfeefd6621e527a5fc1ced3ec41a9bd1b37a7c9fabc0f578e9bed6e537fd0ccf4ac3d4b1b300fcef9963ba1d85314544a321e
SSDEEP 12288:xbFtzBHTk2Z4GuShXufHYX/qoOSY6yztQYt+YEgh/6SQLIA:xLzFvNLiHYXDXyBQYREgh/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEW RFQ 101.exe

File Explorer

NEW RFQ 101.exe

.exe 791KB

NEW RFQ 101.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 d80246672d337713cd5dbae257d6cd81acdbb3b4328141a1bec0a735b9618d71
MD5 53e3ac443f485e6035881ecffe14d1f8
SHA1 8a088224664db33ebbc4a186639ee4d69b9e6a64
SHA512 35c4890a01c5a560098c7edcd88bfeefd6621e527a5fc1ced3ec41a9bd1b37a7c9fabc0f578e9bed6e537fd0ccf4ac3d4b1b300fcef9963ba1d85314544a321e
SSDEEP 12288:xbFtzBHTk2Z4GuShXufHYX/qoOSY6yztQYt+YEgh/6SQLIA:xLzFvNLiHYXDXyBQYREgh/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

815954

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

AHSp.pdb

NEW RFQ 101.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

NEW RFQ 101.exe

mscoree

dotnet