c:\56zm\xzd9\obj\Releas\Zaq1.pdbpdb
Static task
static1
Behavioral task
behavioral1
Sample
VQP.exe
Resource
win7-20240903-en
General
-
Target
VQP.exe
-
Size
274KB
-
MD5
833b444535c4be981bcb71f49d65de67
-
SHA1
e4a091f6468eef250cc33bb61b48e447ed289332
-
SHA256
016eee3b240904666ffd8dc7493193f8c39610d3b326e09085b72b4664175008
-
SHA512
b59631f6a9e1da3e5a20df02dfbfc58a0e27ddf29d2639358e31c21017dafeb6a8b947ba65f68faec399bf574490c83918314c548c7ebcd9862c3e68dadff3c9
-
SSDEEP
6144:PqwQ3ast51XU/6Z63HTpw7MjKYRxZxijVQyGywzMfVdJk5:CFfZZ6XTpwIjNxijWzywIJk5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VQP.exe
Files
-
VQP.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 271KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ