cgTI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
RFQ QUG24-20037005420.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
RFQ QUG24-20037005420.exe
Resource
win10v2004-20240508-en
General
-
Target
RFQ QUG24-20037005420.rar
-
Size
770KB
-
MD5
5b026d64f136ec44c4fff717e47b7b91
-
SHA1
246d92a99073455655e92e9e092988ade9ab2d91
-
SHA256
c3b51e92d7b03741836798a03a2e3cbddc9a6c78ff99cd7d916d629efbeb6c8c
-
SHA512
c1cdc4117a4fe0958bbc7258b1201711c50c88503d2a8b239c03e2a10204955c6c1412319779823ef43fcad1cc892b1c9a8738f2e3fa27589a413dcb90fea50a
-
SSDEEP
24576:zeDp0RkTK9ZvEAcnoJlS+Kn5whiIxVetlx/6R/6SITO/H:+p0Rkm7EZnY9Kn6aHHSITO/H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RFQ QUG24-20037005420.exe
Files
-
RFQ QUG24-20037005420.rar.rar
-
RFQ QUG24-20037005420.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ