G:\QuickMark\QuickMark\obj\Debug\QuickMark.pdb
Static task
static1
Behavioral task
behavioral1
Sample
QuickMark.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
QuickMark.dll
Resource
win10v2004-20240426-en
General
-
Target
QuickMark.dll
-
Size
6KB
-
MD5
200926d1a183b2bc38bbea80a1e007e5
-
SHA1
8d80ff487bc3206eda1ef6075befda09e20c7e00
-
SHA256
84da0e6bf9316ffcbea552a25f064f90e87b23bf2a147e7b8d18d7dd8b8241fe
-
SHA512
67cfdc8587b67fa78ffce1ebaa2ab2a809ed5fe3e2efe23f7ae3fce311f9edb4e0afefe966a0942d951bac84fe3c0fde78b054f35a7dec4be170d9bed421f2c5
-
SSDEEP
96:17d62wXbsIeLRcdo+wXzA3UcSuV+f+d3:1B6H7do+wDA3OXf6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource QuickMark.dll
Files
-
QuickMark.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ