D:\qci_workspace\root-workspaces\__qci-pipeline-454445-1\Output\BinFinal\QQScLauncher.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3076eb9514773efbe0b5f32b0e06848d30aa2d67725a4cbb0c74e09c3b22f49f.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3076eb9514773efbe0b5f32b0e06848d30aa2d67725a4cbb0c74e09c3b22f49f.exe
Resource
win10v2004-20240611-en
General
-
Target
3076eb9514773efbe0b5f32b0e06848d30aa2d67725a4cbb0c74e09c3b22f49f
-
Size
47KB
-
MD5
aca5e9158470b951bb7ae46fc9bf5be2
-
SHA1
383053a6501f220fad5e4f73378b27250dc3792f
-
SHA256
3076eb9514773efbe0b5f32b0e06848d30aa2d67725a4cbb0c74e09c3b22f49f
-
SHA512
8b2c917ad1a0afab1245db80cb4d79ca8afd89475cd0eac5f4009da5a6e5685e2335520833869293c37e675213f490054101657a6c52c8bfddb5acae17daa12f
-
SSDEEP
768:IXOTQg7qBrkQr2g91o6Vkp+SKYyN7vaBa0bFDRGLpTHypaV:uCQg2lkO9fukSaErDY1TpV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3076eb9514773efbe0b5f32b0e06848d30aa2d67725a4cbb0c74e09c3b22f49f
Files
-
3076eb9514773efbe0b5f32b0e06848d30aa2d67725a4cbb0c74e09c3b22f49f.exe windows:5 windows x86 arch:x86
4e728483442719b19ff6ed0d82061df8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FindFirstFileW
FindClose
GetModuleFileNameW
GetStartupInfoW
CloseHandle
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
CreateProcessW
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
user32
SendMessageW
ReleaseDC
GetDC
FindWindowW
gdi32
GetDeviceCaps
vcruntime140
wcsrchr
memset
_except_handler4_common
_CxxThrowException
__std_exception_destroy
__std_exception_copy
api-ms-win-crt-runtime-l1-1-0
_initialize_wide_environment
_initterm
_initterm_e
_exit
_get_wide_winmain_command_line
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_configure_wide_argv
_c_exit
_set_app_type
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_seh_filter_exe
__p___wargv
__p___argc
exit
_cexit
api-ms-win-crt-string-l1-1-0
wcsncmp
wcslen
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
__p__commode
_set_fmode
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
malloc
_callnewh
free
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ