Static task
static1
Behavioral task
behavioral1
Sample
QT2405-173.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
QT2405-173.exe
Resource
win10v2004-20240508-en
General
-
Target
b8bd6a8dcff21950abb07d0648d746b0594b52f0e49ac0022d5b239ea98fe886.rar
-
Size
588KB
-
MD5
2d20b33ef58ac9455a686f3da0e30f14
-
SHA1
1143026f3a98b0e7dd08aa2a38a6622c6b63d904
-
SHA256
b8bd6a8dcff21950abb07d0648d746b0594b52f0e49ac0022d5b239ea98fe886
-
SHA512
452c2be495707dd97d5c9b854a6448d1292bb58be7f3c1c1f25bde0554ab68e4861dd13c234788068f7fbbd639ba81102ad43aa12c0ef8611e18205ba0b7e0f1
-
SSDEEP
12288:x14wInp0NXWR6dXit6rdabIb0zbVR+u9zpQbE51EsCQsTehxm:xisYRRtc2/VR+wzCE5elbTUo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QT2405-173.exe
Files
-
b8bd6a8dcff21950abb07d0648d746b0594b52f0e49ac0022d5b239ea98fe886.rar.rar
-
QT2405-173.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 605KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ