Static task
static1
Behavioral task
behavioral1
Sample
QTN NO 11478.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
QTN NO 11478.exe
Resource
win10v2004-20220812-en
General
-
Target
QTN NO 11478.exe
-
Size
891KB
-
MD5
1179dd8e427142d60d82f588fcdb2138
-
SHA1
03cb870e3ba8994943709b0f6c15bde9ebe20d04
-
SHA256
bd9a3bc50f3ecfc434b0028f3ded4491fa735e837623f268c7bbf4adf0ccf3e9
-
SHA512
cc4cb1d1291fce22a637722c47a92f78e5bba894fe6cd3429189bc3807b4d8bd52b55c104ce51f07b8995663167555b08e037bdb3b6ceb17ab0b58ecb9e765fc
-
SSDEEP
12288:DUx1l4E2P1dzsCBW/T9smPym20WJ5oxswsJ42//1NjoIHN:gt4E2P1dzsCqRXWLox5sXnfkk
Malware Config
Signatures
Files
-
QTN NO 11478.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 889KB - Virtual size: 888KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ