SecuriteInfo[.]com[.]W32[.]Qhost[.]0CCA[.]tr[.]30536[.]2262[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.W32.Qhost.0CCA.tr.30536.2262.exe
Size

18KB
MD5

2fe0a1dff2d89477db20bcf0f8260625
SHA1

9a8c38cb84c5c5b795ae3f38d63c4f79d976bf55
SHA256

17c0d4a5061307669ea66cc375e60002134d89ce42096ce4fcf6f0110b67f48f
SHA512

16d4f83e474aeb9128a2b8ebdec6efd09c84b3475476b962fa3dc5da955f67d587d7bf521b75b92551df4fd8485ecd080effefb9d4da255a0c9921a3f629655e
SSDEEP

384:Z3HqsREnZX3Qt02g2D9ZgNEVXR3fEyugibF8YLEwLEXA:BKSmX3MVD4GXZEyuhhqQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Qhost.0CCA.tr.30536.2262.exe

Files

SecuriteInfo.com.W32.Qhost.0CCA.tr.30536.2262.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ