E:\工作\CQTask2.0\CQTask.Interface\obj\Debug\CQTask.Interface.pdb
Static task
static1
Behavioral task
behavioral1
Sample
CQTask.Interface.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CQTask.Interface.dll
Resource
win10v2004-20240508-en
General
-
Target
CQTask.Interface.dll
-
Size
10KB
-
MD5
a184699618399b020b48e8998d447c3c
-
SHA1
b3af08f15edbf5d9b7700549b92f2ec1c3579dd9
-
SHA256
12936731c206d96c18676bff7a74195c162940fece1d3ad8208c587b6830dee6
-
SHA512
ed1470996637b336e878850a03d12e7bbf75208016b8616399cbf9085a9a0468569c7c7758c548589297ec1296af7e76a61f970d740a44b0aa4f5a2c6f9c3deb
-
SSDEEP
192:fOofvAd7qQ1jaYr2+eVoxC1l64U0R/kfWK:moglqI2YfoXsfWK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CQTask.Interface.dll
Files
-
CQTask.Interface.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ