C:\Users\Admin2024\Desktop\Outputs\Qekah.pdb
Static task
static1
Behavioral task
behavioral1
Sample
AWD_Doc.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
AWD_Doc.exe
Resource
win10v2004-20240709-en
General
-
Target
b1539e59786b84f24711199a82842c938d252433164a437d0fc2f0b9a9517077.ace
-
Size
51KB
-
MD5
ed99d51b1e13d050257974ec8009cbc4
-
SHA1
2fdb7d8bdc352b4aa316804f0c5af9bb52c83738
-
SHA256
b1539e59786b84f24711199a82842c938d252433164a437d0fc2f0b9a9517077
-
SHA512
5bd7258978a793cd3978c78dd7c6d1a76a75af48667ce8945e7d603f26373843758b88ca275ea9919ae3b4e61e886eda774d64a1a4dfc7d2257fded25a557889
-
SSDEEP
768:NllW7eNO8Z/l+u0BwaHrkTdD+hpM/m3Dmo+jtHmXBleHyEPEG47+7FXJ+h1Bip7:Nl47bW/t0BUgTmoQHO7eHFPNBwhCV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/AWD_Doc.exe
Files
-
b1539e59786b84f24711199a82842c938d252433164a437d0fc2f0b9a9517077.ace.ace
-
out.ace.ace
-
AWD_Doc.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ