qyick_maybe_OYwsocs2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

qyick_maybe_OYwsocs2.exe
Size

2.0MB
MD5

b12fdf297577877945890dc07b7295c9
SHA1

12a78bb6394a7c9e7184e7a11477bf5156128012
SHA256

e8755c4630a63c886ec381e11c65917a1ef2842b215aa011dbc317bee2625248
SHA512

24b20864039fe0af8a92fe528bae86ef0faebff15c716435d55ef4d141b127135cc45d79f7b7c72f62d1e80031805963e700a4b3ff38eba60ba66e6d7616ba10
SSDEEP

24576:gdzziThwe+z7k0EAGSCYHOBi/CJnsSPwktcEPWo+bAnRI/vekpuyC3b3tNf4n6Bu:AziY3dXHHUTJRKxumF

Score

N/A

Malware Config

Signatures

Files

qyick_maybe_OYwsocs2.exe
.exe windows x86

2f8b27fa7b9e7156fb21f2b094606c65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetUserDefaultLCID

user32

GetActiveWindow
GetFocus

Sections

.text
Size: 664KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE