IntuitQuickBooks [.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

IntuitQuickBooks .zip
Size

1.3MB
MD5

344db481afa3d00113bd4cd2d2fa57d4
SHA1

9e75839ad3853d15a2608d711b1cfeb533d0b413
SHA256

d087cae7e4c5711385d527881864500fca83c8eec82467c36a668b2b66932043
SHA512

88befb08d61d83b0ad7dcfd813951736b9f187146b386057ef1981829e4535cb55d52c6fbca1cffcab706dc8ecc5d135fd33e44da6a2925fd2a1e0399e77b92e
SSDEEP

12288:Bgp8SSBxIDqPAa3XgX0tUG8hYDPPikLDEWg:eKSSfH4sxUNODPPFLc

Score

1^/10

Malware Config

Signatures

Files

IntuitQuickBooks .zip
.zip
IntuitQuickBooks /IntuitQuickBooks .exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 422KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ