QwGW.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7833f08faa8eba4210758800620948a39a9a7bea302880d5f44739aa10bc21dc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7833f08faa8eba4210758800620948a39a9a7bea302880d5f44739aa10bc21dc.exe
Resource
win10v2004-20240226-en
General
-
Target
7833f08faa8eba4210758800620948a39a9a7bea302880d5f44739aa10bc21dc.exe
-
Size
776KB
-
MD5
1d40361a40c4ca4253f7a50108a669cb
-
SHA1
96b2fa71aaa34912d0fee44a205259181a2a898c
-
SHA256
7833f08faa8eba4210758800620948a39a9a7bea302880d5f44739aa10bc21dc
-
SHA512
f9d2bbcb64b5940fefa7e89905f37c65e9325e3bec3b22b6fd2c6e71b73b468e00279178f5fd1a7af7869975766fdc4d1276baa56b87a4af472d20c98dc26466
-
SSDEEP
24576:ao5tMtsjpVunXMEtDKX65sxrhilQUivc:D5t6sj7unHtQ6utiQUiv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7833f08faa8eba4210758800620948a39a9a7bea302880d5f44739aa10bc21dc.exe
Files
-
7833f08faa8eba4210758800620948a39a9a7bea302880d5f44739aa10bc21dc.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 752KB - Virtual size: 749KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ