QXXx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0089e753d64cb58b7c43c89d413cbbb23cf31043085e05c75e57ebe36e3f9a95.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0089e753d64cb58b7c43c89d413cbbb23cf31043085e05c75e57ebe36e3f9a95.exe
Resource
win10v2004-20231215-en
General
-
Target
50d8f283fecef0da5a6d15d32ac93aeb.bin
-
Size
765KB
-
MD5
f3d8e0583978d7172765d84c9a8646f2
-
SHA1
77c0fd3d0121c40fff28c180a8f7a4e7cf89d615
-
SHA256
d3cc870cfc3ac4c27d046488194b41a4b0fa61245a7d2231172b754b8d1466b4
-
SHA512
65259c79043321cd6b8a1f6752a89059f9af18c13d1fac68576557db578cc3f07661097266fbc7a848dbc0eb6fa0774d12e90674cd3522d89e7e41db738b6879
-
SSDEEP
12288:W6bOSubtVXzMPkapiF5e0RRo3kbht6BnIX/ChR0FHcChybe+OsdIOS0:W6yHXAPkapaoU/WCWBesxS0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0089e753d64cb58b7c43c89d413cbbb23cf31043085e05c75e57ebe36e3f9a95.exe
Files
-
50d8f283fecef0da5a6d15d32ac93aeb.bin.zip
Password: infected
-
0089e753d64cb58b7c43c89d413cbbb23cf31043085e05c75e57ebe36e3f9a95.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 790KB - Virtual size: 789KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ