PI 20484-234 Qinum[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PI 20484-234 Qinum.exe
Size

224KB
MD5

51ce4429076b020f4dbb70f5752d98b6
SHA1

9ab466343cf64f310777e7e08a04ea732b8c6cc0
SHA256

6aea63e9965246348bf1ae9a5ed0b2e7c61c7c463d431a79655b46a42cd1d05c
SHA512

5e3cbfdbb0f1be1206fda1d56becd759eef26b92d8e22bb3f3038eb61eea1bc361a6b3a9f24678d4d52675b4f0eebd30cb3888be2b44fe9cca5da5a13f45ecd4
SSDEEP

6144:ori6xUeqsDmiUQdho0G3Dne7f5HGWYMTyPdLX2tuCAe/ZXN:rVeqshUgUDne7f4WYMTyPdLX2tuCAe/T

Score

1^/10

Malware Config

Signatures

Files

PI 20484-234 Qinum.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 561KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ