RFQ 10125[.]zip | Triage™

General

Target
RFQ 10125.zip
Size 665KB
Sample250723-mdds4aek61
SHA256 34ff94d992f2bdd25c70518efec6af8c44848fd5073bd654e4a2bc82fadd12f3
MD5 b83e0ccbf2df7fac6b86868fb104334e
SHA1 601b4b0b192b0d87dbf97a8c4d4cfd15fc048c9d
SHA512 8ad04374a02c242f74ebd671775f2c04c9c05d3c75e8c6ecbf2672c3dd05b99682de1d7445689291911150351aa024c987c6b80da960d629e226384c79664e5f
SSDEEP 12288:BDSPovCIFkW10+RyeteekEa/njha9C0aGsBFb+TCumeZ6gvsTj:VSAv/WVeIEa/nWFaGtTCurkTj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFQ 10125.exe

File Explorer

RFQ 10125.zip

.zip 665KB
RFQ 10125.exe

.exe 713KB

RFQ 10125.zip

SHA256 34ff94d992f2bdd25c70518efec6af8c44848fd5073bd654e4a2bc82fadd12f3
MD5 b83e0ccbf2df7fac6b86868fb104334e
SHA1 601b4b0b192b0d87dbf97a8c4d4cfd15fc048c9d
SHA512 8ad04374a02c242f74ebd671775f2c04c9c05d3c75e8c6ecbf2672c3dd05b99682de1d7445689291911150351aa024c987c6b80da960d629e226384c79664e5f
SSDEEP 12288:BDSPovCIFkW10+RyeteekEa/njha9C0aGsBFb+TCumeZ6gvsTj:VSAv/WVeIEa/nWFaGtTCurkTj
MD5 SHA1 SHA512 SSDEEP

RFQ 10125.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 ac68239a14d084ecf1bc56f98f80073ac30a3f9f08e4279329f7626da648aae2
MD5 eca2e169f8c3b2f582ea88e134ab6cd8
SHA1 5b9ffa4716d6c742b53f8fc6dcbec424b1f2cda9
SHA512 055591c180c5efa06e505a6d06e5b3ca5f9f083f51299e6fa3632450281297b5607691b001ec09c51f633dade839060e304f6e691fea964fd63da0ae774e1070
SSDEEP 12288:36ACXtVJtDFvvH8Jrtvpfafp9raZqet9C0yGspFf+5CSplP+rLVO5P:KAeh3vPCvBaXraZvFyGB5CS3P9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

735322

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

uGdh.pdb

RFQ 10125.zip

RFQ 10125.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

RFQ 10125.zip

RFQ 10125.exe

mscoree

dotnet