rRFQ009742567[.]scr[.]exe | Triage

Sharing

General

Target

rRFQ009742567.scr.exe
Size

796KB
MD5

35445a4062d47231200e45b71ad74986
SHA1

a7f1d388ae36520b39fefeb93de291f92f45e02f
SHA256

4aee0546da115d551dd0bbaf2c59f17fde0005196484a6a8b6ebdaf0b2dea1b9
SHA512

448699aab1a7818bdcfd3a4771e23441b6f6da6630e24755e957842935846b69d883fe67835319e60b1947855a6070df5df18b0286d8d5100cfd6cf12781ccd9
SSDEEP

12288:Xgvbbnb4Y8+3twFTxRZrvqBVq62AaT+jrTajNYp84XhENJo4zMG3Q1e0lUZ:wDzEFTRvkqtAYSPrHXhiJo4zVwC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rRFQ009742567.scr.exe

Files

rRFQ009742567.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 792KB - Virtual size: 791KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ