SecuriteInfo[.]com[.]W32[.]Qhost[.]0CCA[.]tr[.]21727[.]29151[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.W32.Qhost.0CCA.tr.21727.29151.exe
Size

23KB
MD5

1d7aba95e1c7161ae03027242e6c09a5
SHA1

1d0a8378332bf3626e6e56eeaaf14edaa45e3365
SHA256

f5d6f9eb57bedeb71b6cf5344f01de38ad0c55ee585b9b47365474a59acf7904
SHA512

9881873bccf3aa34317174cfc84794992cc8e9baf805e763325cb3380405639356bb7ebee8eae8765f9628c2e2d45fffdfafcde63ff1b1cca2c08b0acf6986ff
SSDEEP

384:+3HqsREnZX3Qt02g2D9ZgNEVXR3fEyugibF8YLEwLEXpDsmCq33sjP3Gl:CKSmX3MVD4GXZEyuhhq5Db3Qa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Qhost.0CCA.tr.21727.29151.exe

Files

SecuriteInfo.com.W32.Qhost.0CCA.tr.21727.29151.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ