cGQZ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
02e9091dbd0a8b0ec11c211b7f6a746cfe8729cb8f690b5aff3a3e761726a95a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
02e9091dbd0a8b0ec11c211b7f6a746cfe8729cb8f690b5aff3a3e761726a95a.exe
Resource
win10v2004-20240226-en
General
-
Target
02e9091dbd0a8b0ec11c211b7f6a746cfe8729cb8f690b5aff3a3e761726a95a.exe
-
Size
695KB
-
MD5
4811bee6b498aab59b3b885e800e7882
-
SHA1
0bb26cbbd2add13698e533bb3df93f49d9dcf4cc
-
SHA256
02e9091dbd0a8b0ec11c211b7f6a746cfe8729cb8f690b5aff3a3e761726a95a
-
SHA512
a659bb2c330ca1513e1d767b6c13b35e8f4f18055cd272fe52b5ecd8fa27041e0be8db4d56134b874cd8acc6d9111475cfac6c991196d77af3c853b6f374261d
-
SSDEEP
12288:kaI5GnuMsFF178mAW0jwrkQhb2SDEJrP4w665FYuNmtFi4bx9Mfu2UOG/:ZI5i5a1r0OkQN1w63WmtD/bPO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02e9091dbd0a8b0ec11c211b7f6a746cfe8729cb8f690b5aff3a3e761726a95a.exe
Files
-
02e9091dbd0a8b0ec11c211b7f6a746cfe8729cb8f690b5aff3a3e761726a95a.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 688KB - Virtual size: 688KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ