zoDQ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7343d71544388d59ba88d5b7218c4d5695153a6d076cf5a88edfa4135dcbc2b4.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7343d71544388d59ba88d5b7218c4d5695153a6d076cf5a88edfa4135dcbc2b4.exe
Resource
win10v2004-20240426-en
General
-
Target
7343d71544388d59ba88d5b7218c4d5695153a6d076cf5a88edfa4135dcbc2b4.exe
-
Size
697KB
-
MD5
a61c8ce7a04f2de7653bee27b89f3556
-
SHA1
181e0f084cc6e6f9854093561792a3ad6e3da296
-
SHA256
7343d71544388d59ba88d5b7218c4d5695153a6d076cf5a88edfa4135dcbc2b4
-
SHA512
93e318bc56b379db46e2dc378f252f92213434d2e697d90c414a6672ba44a6883c6235bc460013cc0d41fc67a33002f0c3b7787dfebaf87b7e6b463f474ff2ab
-
SSDEEP
12288:4VNAXYMjhvPie/rByY7777777777777bJaLxeIKJpm6ABNRumNHWIB61mknWkK3h:4VNAXYMFniyyYILxwkNWIBGnrKFL7EZ4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7343d71544388d59ba88d5b7218c4d5695153a6d076cf5a88edfa4135dcbc2b4.exe
Files
-
7343d71544388d59ba88d5b7218c4d5695153a6d076cf5a88edfa4135dcbc2b4.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 695KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ