TfQt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4ca5781d934fdeadbc12e6be77fc48ff210818354bb4d10dc2978115c3a56b48.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4ca5781d934fdeadbc12e6be77fc48ff210818354bb4d10dc2978115c3a56b48.exe
Resource
win10v2004-20240802-en
General
-
Target
4ca5781d934fdeadbc12e6be77fc48ff210818354bb4d10dc2978115c3a56b48.exe
-
Size
797KB
-
MD5
3521a354ac2b34f10c81b6516559ad53
-
SHA1
904bd60f87aca146741e497682a0ff3e48f20a51
-
SHA256
4ca5781d934fdeadbc12e6be77fc48ff210818354bb4d10dc2978115c3a56b48
-
SHA512
344c62feaf7e69a7b4f3f287a55aef8e6294737454c046ad6286b6d5287f2d46e68b2005f619b06ad825a469355ef9810a183124729d67f2769168a0cf2b2c36
-
SSDEEP
24576:vxFoUB84MnQgd7mpiLBFCVlbSUd89jCtEns:JFoa8gg98yaV8FwO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ca5781d934fdeadbc12e6be77fc48ff210818354bb4d10dc2978115c3a56b48.exe
Files
-
4ca5781d934fdeadbc12e6be77fc48ff210818354bb4d10dc2978115c3a56b48.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 794KB - Virtual size: 793KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ