nRFQ_532566[.]cab[.]rar | Triage

Sharing

General

Target

nRFQ_532566.cab.rar
Size

668KB
MD5

23352a7ee6d89b44897e84fbe91e1d41
SHA1

00d7de5c2851a83c28176a25c861ab74db6b6b6b
SHA256

f6ba0761464ba7830f65e76974892217a5c92a0d77ab9b12a971288ba6aab43b
SHA512

155dbfc28c6c76cd8c216faceb90134cc7935433b4b2ab97e9451a97cbfbb1b7c05ef7606f806886f8189fd4fd0276e57f22d0de13312b297afb4e61dc7246e9
SSDEEP

12288:2Gqd1EOEycyP6fjcwpjDyBL+RRyBo0LPAQewk8pmxqA2KMzegeoA1zMvyj0vE+a5:2rdqsPMcGDgSRgBo8eHumkAbqJoMaj7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ 532566.scr

Files

nRFQ_532566.cab.rar
.rar
RFQ 532566.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 759KB - Virtual size: 759KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ