BQdJ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1884a949e9068ffe0dd84be7644cd3a8fe320542252e533ce1d2214f79b50990.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1884a949e9068ffe0dd84be7644cd3a8fe320542252e533ce1d2214f79b50990.exe
Resource
win10v2004-20240419-en
General
-
Target
1884a949e9068ffe0dd84be7644cd3a8fe320542252e533ce1d2214f79b50990.exe
-
Size
949KB
-
MD5
d20ba9548abd76ba228729949f845e59
-
SHA1
55d97abeb438e0c4aec352523f10ec3c9d773a8c
-
SHA256
1884a949e9068ffe0dd84be7644cd3a8fe320542252e533ce1d2214f79b50990
-
SHA512
b93e904be969091299e76cba66ef8f300fb4867847c579f58f43386f57674049ee0ba743f4a2827b7caf77c924ab840145dab0ab882bd2c2e899dd6f69dcb8b6
-
SSDEEP
12288:U1P60g/mCJJLRfimNQUWiUwoZ3VZ5K7nKhFSFlSP:U1PBgeCfRRNVT0nY7nO0l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1884a949e9068ffe0dd84be7644cd3a8fe320542252e533ce1d2214f79b50990.exe
Files
-
1884a949e9068ffe0dd84be7644cd3a8fe320542252e533ce1d2214f79b50990.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 657KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 290KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ