c:\rje\tg\vaog2vj\obj\Release\Qrr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
92f54f1548f405e3b6df7e03c9d97f75d6455691162de3a54ab625a9942f6672.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
92f54f1548f405e3b6df7e03c9d97f75d6455691162de3a54ab625a9942f6672.exe
Resource
win10v2004-20240802-en
General
-
Target
92f54f1548f405e3b6df7e03c9d97f75d6455691162de3a54ab625a9942f6672.exe
-
Size
365KB
-
MD5
79903fe5b1c05b1283fd784af19a43e0
-
SHA1
116d46232a75e66f830658d3a65b26690306fcdc
-
SHA256
92f54f1548f405e3b6df7e03c9d97f75d6455691162de3a54ab625a9942f6672
-
SHA512
5a425e0a1037aecc38e05268f8d6d5fb695b4282e76f4a2d3962caf1f9d816d315c4a58c2e5325434562bc20dd3e5b4fdd9724ea7cab00992fc13792e853fe09
-
SSDEEP
6144:rUu7/fekLWZjBoM7XdY3YSCT61GB76pL33VIsBxwbmELnZjF5IjlSgUWu49atoco:rh5ajt7u3ZbGkFDx6XZjF5SlS5Wuve7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 92f54f1548f405e3b6df7e03c9d97f75d6455691162de3a54ab625a9942f6672.exe
Files
-
92f54f1548f405e3b6df7e03c9d97f75d6455691162de3a54ab625a9942f6672.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ