QDAb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3d0c2597a61bef53c2468c53ff641eea3faa4ec908ed7402573d74b1f8f79464.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d0c2597a61bef53c2468c53ff641eea3faa4ec908ed7402573d74b1f8f79464.exe
Resource
win10v2004-20240802-en
General
-
Target
3d0c2597a61bef53c2468c53ff641eea3faa4ec908ed7402573d74b1f8f79464.exe
-
Size
749KB
-
MD5
7cc9e26ea1d1d210b0743a04f635f3e3
-
SHA1
900eac1771403ec7e52613f174280c0d407dca37
-
SHA256
3d0c2597a61bef53c2468c53ff641eea3faa4ec908ed7402573d74b1f8f79464
-
SHA512
abef9f7621f3b33b99b27435ab161c79550809859b9ae44ab309a0d72d090d85d9f09aa7a5a58ddeaeca96460080bccf09bee89a5a755facda392201c9ce582b
-
SSDEEP
12288:6Wg8P98FAb0eZaY+OGPIKOAHLoXmdExbTfwPKrjiMNyUi6rM0Urcz0zERaYjXfI:6+18Qvo5PIKO4oXzBzXk0Urcz0zEzjPI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d0c2597a61bef53c2468c53ff641eea3faa4ec908ed7402573d74b1f8f79464.exe
Files
-
3d0c2597a61bef53c2468c53ff641eea3faa4ec908ed7402573d74b1f8f79464.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 747KB - Virtual size: 746KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ