Static task
static1
Behavioral task
behavioral1
Sample
AQ2.exe
Resource
win7-20240903-en
General
-
Target
AQ2.exe
-
Size
680KB
-
MD5
f5982c5d15d53a2fb2aaf0f473742082
-
SHA1
b7cf643be864723f5dd026fc1fb556478a226dfa
-
SHA256
9591e05c394b7c0044c08bb5eb6500fcfceb109bf5b52ba212b3ed17d25b4108
-
SHA512
e4bfb6c5319b22a31ff5e49ced4df5c0eefffa27cebcf7f472b2a9a98c2335a420576381d09979bbdb5de2b253b1f238b8c9cb83a17eec4c9167e954516e965e
-
SSDEEP
12288:LoHv5MRHcZHo17/qfRh0jEe/Fo+V04YJAGuuGVxR9uuvzH/1PEc3noS:c8cduORh0jEe/lu4AABZJH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AQ2.exe
Files
-
AQ2.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
L_bGCl Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L_6mU1 Size: 677KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE