QwertY[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QwertY.exe
Size

15.4MB
MD5

313aae0f8247f84009cdca6af3f7bb3d
SHA1

1d7ebf5b0efc280cdda4e2639718e717fd488d03
SHA256

d69fe5cb1ded3aaa9a8b64824d820a72da0a1d43c9298cfcb5072f0060aefb8c
SHA512

8f34ea4c2d9b0a9f7dae93757f120cefa9454e2e3b96547d970d2fc866954bcc8c330ee14edda05ff324f10dc74c34b7027d7d778919ab54c979f56e23b81a11
SSDEEP

393216:lPGX9emdt1iDIP+ak4CLChpAgNrw0TelgdHSNGPaYL:lPGX9eEfi4oWCg0g53PaY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QwertY.exe

Files

QwertY.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.4MB - Virtual size: 15.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ