Static task
static1
Behavioral task
behavioral1
Sample
kqtkqvwb6thfrvoy.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
kqtkqvwb6thfrvoy.exe
Resource
win10v2004-20241007-en
General
-
Target
kqtkqvwb6thfrvoy.exe
-
Size
45KB
-
MD5
764563ab8a0dacba0f9e8d57dad8827a
-
SHA1
ebf9eaa9eec6a3ad67c436016ffa089c5ffa48f0
-
SHA256
14d584e60f4098dd63e84e78fbcbfeabb1504825c1c5aadc238450a4e2a4c7f3
-
SHA512
d18b1d35a5e108c376075dfc61e68002ed2378329eea80d235548940c2db638a1c3a0992091aa03c8cf83e7d27c4d58493aa7fd5e21957dfc01c6778eec81455
-
SSDEEP
768:zJBv1EF921xEHUoChu1sgq1W2w2k9vObyCmweuQ2/WUL911wZYBxkD:zJnECEHYo1E1WnHNOblxjQFUL9bwaxs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource kqtkqvwb6thfrvoy.exe
Files
-
kqtkqvwb6thfrvoy.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ