454ee74e7c5d1ddd02c18490c6571a8b3b80d6f860c8193ec062a93f5a7df265 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

454ee74e7c5d1ddd02c18490c6571a8b3b80d6f860c8193ec062a93f5a7df265
Size

462KB
MD5

b2df728669d37ae01aedecc69c085a5c
SHA1

23b38c2d476ce493ee42da8f18f3ded1eef0c933
SHA256

454ee74e7c5d1ddd02c18490c6571a8b3b80d6f860c8193ec062a93f5a7df265
SHA512

541c431b73e71fc1f7bd0af901d710267a4c14fb5e9c3d0cd6b25298bfdcf5b615ddaba6286df45c23b7b728b6cef0dfefbd79e0cef69730049acb3cd81c229f
SSDEEP

12288:2cjNv5cmdD0uWDbX0Aho0JgwgVsNw1SaBBkjF:2cjxGmdD0uOIAhfRgVsNw1S9F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Qcetblzuwyglwh.exe

Files

454ee74e7c5d1ddd02c18490c6571a8b3b80d6f860c8193ec062a93f5a7df265
.zip
Qcetblzuwyglwh.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 468KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 541KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ