Cqqjbi[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Cqqjbi.exe
Size

558KB
MD5

0db27ac51f9e74572ec2def69c5d317a
SHA1

6b39e78365be18da479ae8967016e4c607b519ba
SHA256

33378b9c4779232f3707ace36a6dc5f6e58175472eb6d8b2f27293ba01b947bc
SHA512

8061b1b80531716b6544d25ca10cca4066e7fc7b38e08f76cfd9f4473ab0edd6e52327d3edd7d03ba65b1b16a19a06a0072ecc496b7ab438031f39370137879e
SSDEEP

12288:NqlcVpdb2Wrm/9glARgVwRlqQmGALPokP5dVR2oXA42wcBiDQRD/Tz4ASe3/hxvG:NNpdb2Wrm/9glARgVwRlqQmGALPokP5p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cqqjbi.exe

Files

Cqqjbi.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 509KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ