dIQt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
db20bf3295f1aae23ce386ffb850622a77a474a8a1ddaf240965082ee03055bf.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
db20bf3295f1aae23ce386ffb850622a77a474a8a1ddaf240965082ee03055bf.exe
Resource
win10v2004-20240802-en
General
-
Target
db20bf3295f1aae23ce386ffb850622a77a474a8a1ddaf240965082ee03055bf.exe
-
Size
692KB
-
MD5
722c821ad39dfa881452827cf5012955
-
SHA1
fcb43bf83d5450d7d9e67624b3f402412ab817ac
-
SHA256
db20bf3295f1aae23ce386ffb850622a77a474a8a1ddaf240965082ee03055bf
-
SHA512
00074ac0fa6bbca39668941f58134d8ce38f344cdaf1536b0bb029b54a2f672f5cee873aa6c20c17c35c86a021145634c0e22db76d7526a7dd65ab83b272883a
-
SSDEEP
12288:DWgOoL3rlW4lq30hKzh1GRBrEO+rbGV7wKscBdPRPD/Fl5od1Wm/Ot:lFv4KOzmrUraV7wIRPD9EdF/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db20bf3295f1aae23ce386ffb850622a77a474a8a1ddaf240965082ee03055bf.exe
Files
-
db20bf3295f1aae23ce386ffb850622a77a474a8a1ddaf240965082ee03055bf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 681KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ