Static task
static1
Behavioral task
behavioral1
Sample
Cqliaygnd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Cqliaygnd.exe
Resource
win10v2004-20231222-en
General
-
Target
aaaaa.rar
-
Size
916KB
-
MD5
9453921df5483b1275bf547bbe036b23
-
SHA1
390c85ee964236d6b836e1a348e7cef381ee0cd1
-
SHA256
55dee05727e26115b5177f2bc1fcb9f96ee5bbceaf77fb93f863103e0765ed36
-
SHA512
d8b93b4dfa19a7cc9f265a9b724786c7ccfbbac88848481fa9915798d9b99aafd18bb7c1d3d68dc7c79ac9359f45d675f694032e65b1638cb0c1408aa14e44e5
-
SSDEEP
24576:4dVALHU6KWg+XWsvlf+4Gx+C5E1n4ORz4iKIVfs4:1rpK7sv4tgC56RciKGfs4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Cqliaygnd.exe
Files
-
aaaaa.rar.rar
-
Quote 831005368XXX024.img.iso
-
Cqliaygnd.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ