Static task
static1
Behavioral task
behavioral1
Sample
NQW.exe
Resource
win10-20220901-en
General
-
Target
NQW.exe
-
Size
617KB
-
MD5
0524a03b1ecb780824dfbf44015de5b2
-
SHA1
0e1033fff81687189f0fbfcb899292fca1e5b83c
-
SHA256
bff520d699456c9993c3005a1c4dab2795adac7551b197cbe9a2a7b3e069dcfa
-
SHA512
8ac5f30a27c12e94c8ba83d324348092e0885e5e8a958a13adad0ee29df61f71c0b8e7aa22bbb5165626c943b9e9488985f3520fd0822c1672fe98bfd0c0fc72
-
SSDEEP
12288:itgviL3bQJeMfFWBTVzWeoCfi7tEa1GP+nTjeAlUQ1y:b68sNWeoUi7tNGGTjeAyR
Malware Config
Signatures
Files
-
NQW.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 613KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ