RFQ-HL51L05[.][.][.]rar[.]ZA[.]rar | Triage

Sharing

General

Target

RFQ-HL51L05...rar.ZA.rar
Size

763KB
MD5

1cd92a48197c7a820a2ff8a22cf41db5
SHA1

1f1dbda8cda97b9bcad4bc0549bbef595e8f561f
SHA256

ef963f69e02cbc0bdb2b4fd7d152780a5926f4bab8e679d0221bcb260132e191
SHA512

e03d574e2df0e5dcb232ab621ace865e4a1e1688fbb5ae1c4a45caf5bdb42ceeb443ff9f6658db1981bb0f80c68933f9e65ab19832b68f9619cb643f8a2964eb
SSDEEP

12288:rkKNWPNddvbHBZi5PjrV5ydie8J7D9AummSzDZjgGAftB55noSm1gjg2IYe/lC6h:oKEdN+5Pjh5ydgbSnBA0gjg2IYxTAveS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO#RFQ-HL51L05....exe

Files

RFQ-HL51L05...rar.ZA.rar
.rar
PO#RFQ-HL51L05....exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 846KB - Virtual size: 845KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ