qx[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

qx.exe
Size

366KB
MD5

e1e221a1bac0e18b9c2883daffd706f7
SHA1

032601b698df8fdb023aa96f37681fee0c699a0b
SHA256

abbcd0133ac8a1f7b2ec96de919aed00b5fca5fd183e287f40aea238c1a51993
SHA512

4e5b40b37005b4f9031b8f31d041e573db7ef555c522e1577b5a08e96f23e899b3d221fd0368d16aacf76742731fd4a834a7477f3fe5e204d0abf07851451db4
SSDEEP

6144:E5mV/cuCsyVAf02+QumWxmIK/OaXnt2qc/x4Cn/9n1fZ0cfTmpVlJAknKl:cmVkuCsyVAcjQH7IK/OAtNc/H1x0ySpO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
qx.exe

Files

qx.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 307KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ