Qz8jD8IBXlSH0Gp[.]exe | Triage

Sharing

General

Target

Qz8jD8IBXlSH0Gp.exe
Size

682KB
MD5

2ba38d110d7f63bef0ec0dc14bd71f9a
SHA1

32b24d9e7227516f58ee1928872af6f6a3dd98b4
SHA256

fc4b30802da59aafff89ecc9cac8981c35109b22cbdff3049bc1df46ca1543d6
SHA512

9afd44f8de1ff974f915b4968270adb3be7a770179113b694247a48b6ac2c31b8a374fa06e95a5182253b4e7c5e14ef32fec9a0906b09980e5bbddd0d19eff0a
SSDEEP

12288:J80WWObWINS+bX4QJNmzgSi7e/HxqQSRsrY0yTT2Vqsy3kxi4bTlmS:V4bNSaIoNOgSiqoQSRsrvyTaG3YTlm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Qz8jD8IBXlSH0Gp.exe

Files

Qz8jD8IBXlSH0Gp.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 613KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ