qmZq.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2ec8179daac23d3f433702623eb9b216057e114480b271a6225f228c51bee0d2.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2ec8179daac23d3f433702623eb9b216057e114480b271a6225f228c51bee0d2.exe
Resource
win10v2004-20240508-en
General
-
Target
2ec8179daac23d3f433702623eb9b216057e114480b271a6225f228c51bee0d2.exe
-
Size
732KB
-
MD5
9ac6d0c9e29cf030a96f2693464a7a05
-
SHA1
115d08dc49b117554e8dba99fa0dce68751445d8
-
SHA256
2ec8179daac23d3f433702623eb9b216057e114480b271a6225f228c51bee0d2
-
SHA512
1c985cf32439cc7714f0672826ce916e3d0441a5a5af1eda6124aa4323232da484fd1a1491ced99bcebe4710ce31a5d56f32b4ad79aa5afcdb2b450bea3d9d60
-
SSDEEP
12288:XPO2JLfYry+0NZfGxO/49wSreaPTBGJBlgkj4u4emzw2qKeW1f7gbeQ:mwl+0NZAO/49w/k9GdrjtXcPq3Wu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ec8179daac23d3f433702623eb9b216057e114480b271a6225f228c51bee0d2.exe
Files
-
2ec8179daac23d3f433702623eb9b216057e114480b271a6225f228c51bee0d2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 712KB - Virtual size: 711KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ