Static task
static1
Behavioral task
behavioral1
Sample
Qgipkhjk.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Qgipkhjk.exe
Resource
win10v2004-20220812-en
General
-
Target
Qgipkhjk.exe
-
Size
9KB
-
MD5
296514bd25a86226602a24974a58a68f
-
SHA1
22a7abc88c004a4ed25d853cabd9c67e82e708a3
-
SHA256
c3b593a63d726e2b6911b2d8f1e0b31bd66b37a6f4cc831df111d7651a9b991d
-
SHA512
acc884f5f98dad45524019bd62b5f2523bfa1d51fc22998553b35cedcf20f062fb9bb5200193c64c5eb4df8f27dbd371ea37e60f3638285a1a7428f12b7e015a
-
SSDEEP
192:oLN0bLGw7nXyOvghWpdP8stYcFmVc03KY:oLN0bLGw7XL5dPptYcFmVc03K
Malware Config
Signatures
Files
-
Qgipkhjk.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ