nqKPTyXXug7O4pl[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

nqKPTyXXug7O4pl.exe
Size

849KB
MD5

0292c4bc9f588bca85bc22f0dff311fd
SHA1

329c3480c9eb2579dc2421048b102ea0639ecef2
SHA256

7668d64997d999a406e46cf050a2d3d373efbf269686bcbd1e6348241c471894
SHA512

16f4ff42107102419175bc47c38ad48d064d1442b5c232c6acc1d24c66bc690672aadaf494a5ff4be462a12ad5fb2d892d05ddb8cd6fc4e63cf8818ac9c17978
SSDEEP

24576:SqgG1tCueiVXC7papVqTTRTvi7eq5LqS:VgqtCDiVOpapE5Li7eqF7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nqKPTyXXug7O4pl.exe

Files

nqKPTyXXug7O4pl.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 844KB - Virtual size: 843KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ