qca[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

qca.exe
Size

383KB
MD5

b065af93b5fd551526705b5968d0ca10
SHA1

e807ff55829a205941096b8edfcda6a0cdc3ccc1
SHA256

28c33a9676f04274b2868c1a2c092503a57d38833f0f8b964d55458623b82b6e
SHA512

dcff979209cfe0d309a9ddbf1c99de41102cc86f8541160ad6e185d3ae23b5fd7c97c4c36fd7df95ef3aa73b4846b5811fdb96ee671d0a2220d8f75c009aebb4
SSDEEP

6144:Lp0ZFUrIyx1JSIT4k2z0qJ1yFMj/76wI2dfWG072/PeyXT6DI1h3H+lusL:L+ZFUrrBj4kFFMjjGq57Pe2TaI1h3OtL

Score

N/A

Malware Config

Signatures

Files

qca.exe
.exe windows x86

6a064170cf0dc0e6f75b6fe5589b6e60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptImportKey

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_getch
_initterm
_iob
_lock
_onexit
_strdup
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
printf
puts
signal
strchr
strcmp
strlen
strncmp
vfprintf

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6a064170cf0dc0e6f75b6fe5589b6e60

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

Sections

.text Size: 89KB - Virtual size: 89KB

.data Size: 235KB - Virtual size: 234KB

.rdata Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 6KB

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 52KB - Virtual size: 51KB

.text
Size: 89KB - Virtual size: 89KB

.data
Size: 235KB - Virtual size: 234KB

.rdata
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 6KB

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 52KB - Virtual size: 51KB