Static task
static1
Behavioral task
behavioral1
Sample
QQT Cancer/QQT Cancer.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
QQT Cancer/QQT Cancer.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
QQT Cancer/下载必看.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
QQT Cancer/下载必看.url
Resource
win10v2004-20231215-en
General
-
Target
142324183d4bfbe1cbdd1e56301e1ac5
-
Size
1.9MB
-
MD5
142324183d4bfbe1cbdd1e56301e1ac5
-
SHA1
43e17ca362c1c4905a1433ce01460613891f46ca
-
SHA256
41392a4b0f9594a6898d927a6acde35a8ad59d4c0ff9d5208e1a8413bcfacc83
-
SHA512
27382f874d4babbfc696e8eafac8d896c62bf3eebd5ecb6c0a5b53c02c62a5a9d137b82904c2a774f123e112d5810ec19def827aaf84aeae112870ff9efe2bb3
-
SSDEEP
49152:ndPbbvsyKOeygsce4ah+9bpLp5z0T+Veum6bzMkWiAl61jT1VbMInfW:dPP7eyg0S5zbVeum6bA1iAl6ZJRMIne
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QQT Cancer/QQT Cancer.exe
Files
-
142324183d4bfbe1cbdd1e56301e1ac5.rar
-
QQT Cancer/QQT Cancer.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
3onAID7S Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YvoRIplJ Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HtBEb1de Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
tEkfD5WM Size: 160B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L5iYXRab Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
4wicrlcH Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
QQT Cancer/下载必看.url
-
QQT Cancer/必读使用说明.txt