KxQY.pdb
Static task
static1
Behavioral task
behavioral1
Sample
03f83651d5696dc9dd5acbcc46ec7b586efacd6f70f8514bef483ae64fccfaa9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03f83651d5696dc9dd5acbcc46ec7b586efacd6f70f8514bef483ae64fccfaa9.exe
Resource
win10v2004-20231215-en
General
-
Target
03f83651d5696dc9dd5acbcc46ec7b586efacd6f70f8514bef483ae64fccfaa9
-
Size
606KB
-
MD5
152058a910e4499f33edab7ce2e7bdae
-
SHA1
d583cfbeea8716f2c0a6a04a7b60105860d63228
-
SHA256
03f83651d5696dc9dd5acbcc46ec7b586efacd6f70f8514bef483ae64fccfaa9
-
SHA512
99ba7cd93c649b45109f020914b57f3f0563d8ef71aa8cf97199dd1d2ba090df0115fa89653cb0bbfab4f0466f7cbb5559fbffb2d1fe0deec0333139e76c3a6d
-
SSDEEP
12288:9CrJVh56SUnuiKLnQsnuAkXxIaibTavbN7fEpHzioAgRhR:wVeSaIudI5GvbF8RzN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03f83651d5696dc9dd5acbcc46ec7b586efacd6f70f8514bef483ae64fccfaa9
Files
-
03f83651d5696dc9dd5acbcc46ec7b586efacd6f70f8514bef483ae64fccfaa9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 603KB - Virtual size: 603KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ