Qbot_posting[.]dat | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Qbot_posting.dat
Size

638KB
MD5

66c31e46e776c384f69c856505ab7852
SHA1

0502fa50d6117f1ed5d66a2d3c961eae5609f95b
SHA256

bc672fe23b19898032b312ab849d781cfd450966e17f571b8e31a0328f2bafe8
SHA512

6e916d69f0dc9f0284c4aacb7a2f75aeaa628aed3419cd16e8ac962ec98d9c7db7baceaacf3f635a496a1b13d29bcd7f3a1d7788e964b15c319282130857bebe
SSDEEP

12288:fa2sTwwDbozbuUijWQ2ieToMjavBJHuZXJMeGbX//IO:fBs1QuUijWHVUM+7OZXJM5T//I

Score

1^/10

Malware Config

Signatures

Files

Qbot_posting.dat
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 397KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ