common_qry[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

common_qry.exe
Size

68KB
MD5

8ef689a383ac10ea7ed8153a438d300a
SHA1

6321e86618514f09f1f82eeedb98f6db3dfeee4d
SHA256

10c60afd369a35078f97d4fc54e672c0b366604426323474505d69ea4b3ee433
SHA512

5321ba1cb87f0f91fe376317cb15522f33374d827f8f7e18244a5d156ed91cced604e8b8f8e47ea4a9f7604bfdf632a2fc5070b4772ed17f5f3a610ad2b86aa4
SSDEEP

1536:Ml7CV3siirGWIIIIPc21hjr1K0cmS3mBiXhiE7:MRCJsiiiWIIIIPc2vBohik

Score

1^/10

Malware Config

Signatures

Files

common_qry.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ