Static task
static1
Behavioral task
behavioral1
Sample
Qaxxckf.exe
Resource
win7-20230220-en
General
-
Target
Qaxxckf.exe
-
Size
663KB
-
MD5
6efa2cd0f1f512cddfad2faa457eddcb
-
SHA1
5ba6af2698c3a3a86d1132239c0033284762f755
-
SHA256
03fcf785b17d2ef8014c2bc90129da267f899218312c789ce94ee24e9a97c105
-
SHA512
8f68a84a40324f5f1a308f000eca18e2cf2cb36108ac4055a6a5f124d386f8d0d585e27f849ec1c39ee5a37dd586a7e257db4697a700605cbd59d68f68dcc8cc
-
SSDEEP
12288:VkQDvtTSFQ/Lumd4Sx0ROtr3L+IbX8Y+D92ulpCqb5kQXn9L79f7D8C:VDlTSFQ/CvSR9b+E8Y+R2uLCqb55tL7O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Qaxxckf.exe
Files
-
Qaxxckf.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 661KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ