Static task
static1
Behavioral task
behavioral1
Sample
SpeQ Mathematics.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
SpeQ Mathematics.exe
Resource
win11-20240214-en
General
-
Target
SpeQ Mathematics.exe
-
Size
131KB
-
MD5
4757e8ae0d212550fbe68765971b5680
-
SHA1
026043266e7503507bd049906a54ba6936123837
-
SHA256
26fa750a7bd1f4e06009e632d438f4bae68c54d8a42d31e2c26b6097f600a59d
-
SHA512
2859c0f0f372e109b9b9bde46fb99201918f2d10e3abf5f1087385575cde15ac5c2a4f459e3ac50b4dbce7e8590735cf4aece23953ecf89b40fa3c7035eef07b
-
SSDEEP
3072:6WdXHP7bDJ/G77MGUESp7zJ18l7qkiAT5xpmw1loqroGk31:6WdXP7ccRBd47J1xnlouo91
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SpeQ Mathematics.exe
Files
-
SpeQ Mathematics.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.idata Size: 121KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE