TQH0009000AQ[.]exe | Triage

Sharing

General

Target

TQH0009000AQ.exe
Size

320KB
MD5

86501dabe8c2a09915b906659d0902b8
SHA1

be7bb8d81f195e1df299a7eab354717878ef437a
SHA256

6b8bec10fc45b9cafc5f9fe08bd936f89a30e2b4107eeed1616d2c2b0d38414d
SHA512

e9dc74fe78ca7ec38745ab2d1ef28e1e28b19cd099e68ba4184cb6d10d7f47b7f137a8a4b2a5fcffdcf8dc196165aa9465a57124501fdfe905acdc7dc51bed57
SSDEEP

6144:pL4t6UdpDlM9EfB2Afxhn7D1NwvK7xjA1G4m8isJv0hpESnMX5tqX:d9EfNfxGpnucSMX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TQH0009000AQ.exe

Files

TQH0009000AQ.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ