Lqpmnqf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lqpmnqf.exe
Size

1.4MB
MD5

8f39e862380f67a539f4988dadb2fcc7
SHA1

edb92fb403f582e760bbbafd99961aba86208e83
SHA256

0f536ab69a6b86c2725fb65d54f9386cdc464291e4f8796ce50ba9366dcd432f
SHA512

4e69cfcb408eecaa71888bd3cf9d337aeb8c0ddc9a956b9b3e66dbb0b26f8a4218efcb96ad68532d1f0ed50a49e3941a71f66647a4370e31cc93a361fba36135
SSDEEP

24576:Ow5Fl8T+c2l6MSIiYrscNJrrKXlZRRU8QimK9sJDEXHZLoBVGI34:OwDy+HoIlAcNJAl1U8doJUHunD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lqpmnqf.exe

Files

Lqpmnqf.exe
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ