Static task
static1
Behavioral task
behavioral1
Sample
RFQ_TBD#00417566.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
RFQ_TBD#00417566.exe
Resource
win10v2004-20241007-en
General
-
Target
8275bff47973ac35a9ff722a24aa3522b6a2db4121f1a7b0861bc281cfc8578c.z
-
Size
683KB
-
MD5
2cfbe5c270d5757f82349f30c793a130
-
SHA1
61fe4ab559d1cf49493296515927e2fed37054b0
-
SHA256
8275bff47973ac35a9ff722a24aa3522b6a2db4121f1a7b0861bc281cfc8578c
-
SHA512
f955939d89de3c9f0314f437ef143ae637634fcdee55c2b3ef0af182ac59a90646110343383a377bba642fa555835244d80ef53875fa305b226b9b057b147751
-
SSDEEP
12288:SaRjGAgfTsRhBPrg5B4VSK1TAjN5FR1Xeqbj3fQbo9AepE3Zfk:3j5BzBDgoVN1MntPvONe+3e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RFQ_TBD#00417566.exe
Files
-
8275bff47973ac35a9ff722a24aa3522b6a2db4121f1a7b0861bc281cfc8578c.z.rar
-
RFQ_TBD#00417566.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 804KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ