General

  • Target

    RFQ.00.014-Samples.arj

  • Size

    4.5MB

  • MD5

    2cccd0f04c7ab1e13aa95cbae4c0bb3d

  • SHA1

    8734eb8d191bb4e5a090912a5a2f973fe3410914

  • SHA256

    3cfd788d5afda6983a45caf8ca7a3b013098f287aba5aed9e41dc7250f5b7957

  • SHA512

    5efa43b0d7969fbfe71d2208db41ff9a05a36094a23be8c399beb1c654f1859c090153466d20bf60d4fd9326649131716631a4e7bd49a2eb2ec8a9c3e7fc1f52

  • SSDEEP

    98304:/ow8NMDyWmByeZuzuYpZXNWQxcAs8okEIPi7:/ow2WKHZuuYPNWicAssbPi7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RFQ.00.014-Samples.arj
    .rar
  • BugSplat64.dll
    .dll windows:6 windows x64 arch:x64

    d6e8635c30b38d2e577eada7f46ea3d8


    Headers

    Imports

    Exports

    Sections

  • RFQ.00.014 -Samples.exe
    .exe windows:6 windows x64 arch:x64

    e8db4ac21fda256a31e6fbda49d9dc94


    Code Sign

    Headers

    Imports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    2cb5da5225e972a08f32d04b8085dc7e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    451bdabc0299e6b9dc317480ef12c3dc


    Code Sign

    Headers

    Imports

    Exports

    Sections