GxQf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
38f275624c634801c164c2c8f3294cbeea49b47e8e8d83bda53a0bc8aa7f7106.exe
Resource
win7-20240903-en
General
-
Target
38f275624c634801c164c2c8f3294cbeea49b47e8e8d83bda53a0bc8aa7f7106.exe
-
Size
920KB
-
MD5
78eff09f295aa4b3aaf36af5245efe94
-
SHA1
dea545e8b85f2c1201f7aa3a54f643826ca8a6ed
-
SHA256
38f275624c634801c164c2c8f3294cbeea49b47e8e8d83bda53a0bc8aa7f7106
-
SHA512
a8b49247156aa7004206f24211054f7f37c73df06e8a85ecf843e9c44cc99a5cf29886e85ba03d89a87a1d3968322c25cdef7877ae6c5efcfa946910204ce67f
-
SSDEEP
12288:T3TEG/N9AKPGu+MAyn6+6Slh5/2qVe2lR8XaZW4IaBAP7r9r/+ppppppppppppp7:8AnAPRo6+pPOnoR8X2W4JBA1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38f275624c634801c164c2c8f3294cbeea49b47e8e8d83bda53a0bc8aa7f7106.exe
Files
-
38f275624c634801c164c2c8f3294cbeea49b47e8e8d83bda53a0bc8aa7f7106.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 707KB - Virtual size: 706KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ