c:\rje\tg\bj\Re\ease\gqa.pdb
Static task
static1
Behavioral task
behavioral1
Sample
update.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
update.exe
Resource
win10v2004-20240802-en
General
-
Target
update.exe
-
Size
309KB
-
MD5
5f187c65c69f67a083fd067ac3e8a385
-
SHA1
2d151111a1e985dc5881a2890592e112727cc2cc
-
SHA256
9b9c375252ef4654266f912a89116a98d746c3539704597fac49eaf42decf10d
-
SHA512
2dcffa04b14dd1886bf2bb292ee4d18f491ca28fb1e435a7a8c54621944db156275b6f9889484aeb94d8955f8b82669ea9db282c9f89337e112febb3e37bae37
-
SSDEEP
6144:/H4M34MIy6EFhskKhME8Fh5Dzf0ftdo2+RYydUYg2NtzdFOvRO:/HH34ny6Ecth78Fh5nEtnLqs2NtznO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource update.exe
Files
-
update.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 307KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ