Static task
static1
Behavioral task
behavioral1
Sample
QNab.exe
Resource
win10-20230220-en
General
-
Target
QNab.exe
-
Size
34KB
-
MD5
be620b6403f6642f04d89b6dd27750e8
-
SHA1
aeb0087c1d869ac9f2cad60abeb66a41d1c2ddaa
-
SHA256
76450d27eab70bd62b73f966ab91bb10110ee3305dd90b8ee6f88387c05ec979
-
SHA512
6a97118470c3ed169c8e7e0eac9067acbfb92b29862b6e17004f835a8738550ab81771d19c6686a287b83b69f327aeeb7dd05e01b251ea1567e41287cea7fdef
-
SSDEEP
384:IxiHABz9q3FxmHu+JjOdb9kD9rCvvdr9akcpMQiW4zmkZXOfq1RK2ZkLChUXsAZ+:ICIFqb9S9rCvdXbOfq1/kmK8AZRA
Malware Config
Signatures
Files
-
QNab.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ