bQ5J[.]exe | Triage

Sharing

General

Target

bQ5J.exe
Size

26KB
MD5

82f98bb613a30f61ceb9ca7686f97847
SHA1

31c0ba8ec4ecd3d76fff9fc679a791d59e634047
SHA256

6a96b4732718c044ce7c95dc71493e1f09a4005003159114068a6122fee051b4
SHA512

a4efd5fe6ba631afdf5dc91ed2f2c2594583dc0fc6945da0c69fe6c9f81658023a8f3954f78e0adc10c2f2b11a4f0ffcf90447279cecec5398e383bd1a879ce2
SSDEEP

384:LLd6cufEYAA/XgWeyoHzCYe/iBY2OzRLTm3yilqr63+bNtVvGD:fl8AA/6T5e/gsEgVvGD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bQ5J.exe

Files

bQ5J.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ