QT367001[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QT367001.exe
Size

711KB
MD5

c72b6d0fa5da7249b6ddffe1b3d83363
SHA1

2f4329fa3aa0a1811b22d4645a8679288abbbd77
SHA256

a662463b94dc39ece0f3b0d885772475a475b8e1cb347e0909087ced1f54e552
SHA512

f6771799a0b9d5b62f8ef10d5c15c2ba8b506631317e5eed36418791c8e64edc1e7faa88edf457f459657dc66d4e0b75387fa5ccccb73e6ad7d962af421588dd
SSDEEP

12288:6BOJA0xPmangAfwVUYArnfndGKCXlbgNe6s/buvjwbuHSd9:6t0xua1fwVrEdGKC27s/4syS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QT367001.exe

Files

QT367001.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 707KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ