qCh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
C249SH24-254SMS Order.exe
Resource
win7-20240903-en
General
-
Target
47ab641cbb694b453938f59bd6e4c21c516c3f2fc0c39ec8e91be926099b349e
-
Size
684KB
-
MD5
ddf8598f262e5fa63963c5005421507e
-
SHA1
dcdc19bc443c8a28df9ca2e5fe8c7def42f05041
-
SHA256
47ab641cbb694b453938f59bd6e4c21c516c3f2fc0c39ec8e91be926099b349e
-
SHA512
1289a12ea2526da5a0af1547f3ecf89bebb6688b420aeadfdca052b99bc07810804c54a5570eef8b79a9cf683bfa109b6dcc9317b2f30f13e641792b94a52c4e
-
SSDEEP
12288:bE1L4aS/xsR1P62HUGz/jYNdhTOKCyxtJNxTqpX0Zq7ARSo575RcgDd5Drt:bE1Jzi9G7kLfN48q7v2N+E5t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/C249SH24-254SMS Order.exe
Files
-
47ab641cbb694b453938f59bd6e4c21c516c3f2fc0c39ec8e91be926099b349e.zip
-
C249SH24-254SMS Order.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 637KB - Virtual size: 637KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ