EQ_6[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EQ_6.exe
Size

4.1MB
MD5

2990ba23824d8d7e33471e12cadc5fcf
SHA1

40b608ad21421d0a3e216f3c14cc4ac978be1946
SHA256

d5094865dbfd87c43c5f6a7b41aec4016b05d0a6b1663d5b4cd97d0f5cdc7e38
SHA512

fc8e99c0622851807c5cce18d3a58ea3585d9486c405ca5ac21717c91a9aed2c34d3f0bc2bd4db6310b52ce58a8fb180d2477236f008f5cafbf118efa1b7db2e
SSDEEP

24576:2pIBUw9pF2m9s/K/J2difFyjNhrYRSzDLi7MyaxN:hjsXrYRwKMyax

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EQ_6.exe

Files

EQ_6.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ