qyick_maybe_Qywsocs[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

qyick_maybe_Qywsocs.exe
Size

2.0MB
MD5

5374d03f95d93fb222f4804c70c48001
SHA1

1ec6d3e0f5933209dd1f4323531268095d6905fa
SHA256

73cd09661a26f287cf7375d12229e6cfede6e2e090702996fd582658d87b54c7
SHA512

d08d1e670be301a74b85af24078ea49d3d17e5bebc40fda147e44e22f9457ee3240d567f7f4634a6df67662f9d4aa0fd0806ad2b5fa34162c36ca11094037803
SSDEEP

24576:AWU98qmXgvSn/K5Ot9BFGZq6KK34xti09wDiu/QFR0w4IuemxFUEKvelMIjfxoCF:Iqq3KnS5iYsn7wsRGT/TthN

Score

N/A

Malware Config

Signatures

Files

qyick_maybe_Qywsocs.exe
.exe windows x86

643688ce724626e3788988662b9525ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
VirtualAlloc

user32

GetOpenClipboardWindow
GetCursor

Sections

.text
Size: 668KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE