Static task
static1
Behavioral task
behavioral1
Sample
QPF_023_R20.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
QPF_023_R20.exe
Resource
win10v2004-20230621-en
General
-
Target
QPF_023_R20.exe
-
Size
14KB
-
MD5
02152617a6b0c1112eb544b8925565b6
-
SHA1
b1e97d95ddd1cf116518aabbade6a1484bf97e37
-
SHA256
7e5db4d74733c673a834aed6ad6e3e312444d8d89974ed47482762ec2f364c8e
-
SHA512
c7a19e6c04f90bdf883744bbfd61fe06afb8e83e74a77269e3de7dcdb39aff742641892ffda9a023a215676259e0c4dc0faaba9f46e6b1ea6d7ffe6ef775c649
-
SSDEEP
384:cXxDfLHRLyA/EFBJ689Kjen2+aAHLJJBNvmLfnSb:cXxjL9ydx/KqdaArbXuzSb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource QPF_023_R20.exe
Files
-
QPF_023_R20.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ