MeiqiaWinLatest3[.]1[.]8[.]6[.]exe | Triage

Sharing

General

Target

MeiqiaWinLatest3.1.8.6.exe
Size

80.4MB
MD5

d0cb9b0cd6bceb772f57aa24aa90e75c
SHA1

58b4a1f461341fdb91cdaca868fcf620722fd0e9
SHA256

50bb46b0c0f11fd4e16ad93b7a29b0e424be5a78f9bcee6c71445cfa32e04881
SHA512

fa98061c573a50de7ba7a8a0fdde87b3d49fef4616b3e94f380df2ef14946db82aaf0f09c49120fddbc40f4da4a1b912caec73df7c6fb1c7e5af1aed608f3dd6
SSDEEP

1572864:lh4ex4EsqQaFAGMhx2PZnYCOfr7PlPho+nS0YzI3zgq0y+xwTLY3FEUFkOQ:HtpQaF5M7MxSkT0MI3zgq07eTM3SUFk1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

MeiqiaWinLatest3.1.8.6.exe

Files

MeiqiaWinLatest3.1.8.6.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ