sAeC.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
QYqXYpTo9nLX2kX.exe
Resource
win7-20240903-en
General
-
Target
F2BB1EBAD2E1436DEAA5DE5D110EF668
-
Size
530KB
-
MD5
f2bb1ebad2e1436deaa5de5d110ef668
-
SHA1
5514942406f123558024aaf60ad72563e09de5ab
-
SHA256
25a5bfa90c4638ec693f2fd253604f0c5e0acd120a658b7578861b99861c472f
-
SHA512
c9a59f6cebf1a02ab54f572391943ff802414f711180e0dd7b31858d5ac3abfa2487a9e2696648034d95c48f2a8657a716fe19bc24ea221d0415755c8f9521c2
-
SSDEEP
12288:WbButTuHDI77ZZkdFVyIQlQi5wmSKb46I6tmNkf1+SLrg:wBjI7UD3QlQi5W846YN41+SLrg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/QYqXYpTo9nLX2kX.exe
Files
-
F2BB1EBAD2E1436DEAA5DE5D110EF668.zip
-
QYqXYpTo9nLX2kX.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 550KB - Virtual size: 549KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ