QrmkCyChrIFVWYg[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QrmkCyChrIFVWYg.exe
Size

779KB
MD5

98a5358665656e68a35345bf05e9e965
SHA1

f9bcc1508017b7778ca322bb997c00cced53deb9
SHA256

547666ce0f98bbd093c5375eae900472c0faa12f25671d9438bcf2f25e49b00f
SHA512

4930852b47e4541a1d9320ef55a45c0d0368b8500387a1ee20fb343c2f173dc98ef5b7ce2f6c9cff503748f8ec5eb271654c37f0c6c3bd55291eebbb333a55a0
SSDEEP

12288:z0hefaqG4yPaVToew7RQDX+gyW+k1H8Q6Fy2Mxzo3:zSeSqG4yPaV92RQCgy5YH8Q6F0xM

Score

1^/10

Malware Config

Signatures

Files

QrmkCyChrIFVWYg.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 777KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ