qtio.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8daf0632533950142b105f3d85c333ae37a1c060312c8e12b84165880d79a68f.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8daf0632533950142b105f3d85c333ae37a1c060312c8e12b84165880d79a68f.exe
Resource
win10v2004-20240709-en
General
-
Target
8daf0632533950142b105f3d85c333ae37a1c060312c8e12b84165880d79a68f.exe
-
Size
812KB
-
MD5
d7553f956d7df4befd546d79063e1416
-
SHA1
d09aae04e16d1736c70b40847ff1cfd2fd6fc948
-
SHA256
8daf0632533950142b105f3d85c333ae37a1c060312c8e12b84165880d79a68f
-
SHA512
38035126264986e9a1187ccd20a82ca3afe80f924a88f09ce8f1d5817ca436d656ec9951e83ceefaaf3a5717881f07d0c535da59ef617503688bca84eeca299a
-
SSDEEP
24576:gCc0tBN1Fz6pEFAnT1vk0iA9QRvB/MN1:gCc0BipkATRsvR6L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8daf0632533950142b105f3d85c333ae37a1c060312c8e12b84165880d79a68f.exe
Files
-
8daf0632533950142b105f3d85c333ae37a1c060312c8e12b84165880d79a68f.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 809KB - Virtual size: 809KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ