20000[.]S55 Quickflash[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20000.S55 Quickflash.exe
Size

1.1MB
MD5

94660e4e577a1538b5d86e255cdf5db1
SHA1

515f05be6dc81d5416bda960c2aacf8c16a7970b
SHA256

0c4f00090638efb2effa993b9980d46ff4810af08360daa7f27a1bf413a9f035
SHA512

672eb38e756dd3e764ae2a5f859ccdfd50523f04d15ce709d426ac24248b03533da9040c0309f45e89372d7c57f60f3109fb3ce594575915f1d1b34d6fe59407
SSDEEP

24576:2wWHPSgWWgcfUb3W4IFCm3ltBk1hzdP4dMfn2V5xoEOo:2tPrjlfM38tC1h94d+o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20000.S55 Quickflash.exe

Files

20000.S55 Quickflash.exe
.exe windows:4 windows x86

476f92c8f9ddbcb805cdc5c61fbc5635

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtContinue

Sections

Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ