q8ib7r | Triage

Sharing

Copy URL Twitter E-mail

General

Target

q8ib7r
Size

462KB
MD5

5b928b06e993d962c4bd1a111db298da
SHA1

a6257dfeacd71515aa60d602410ff53187240d64
SHA256

6178d9940b76e728e7f7621bbdab8989bc9e411557c659d79e24fe3d72b384cd
SHA512

903908ef32dbbd929e08fac4cb437e5e270fbb51e2b74683ff9c37afecc0a081f262ab33e2af281c8ece6a8e637d0fc2f0f46787cd9dacaf72895a8c0453c075
SSDEEP

12288:FI2keQ5vziJno5pki0yKnulgCPfeoLW+treAuN/PjgMX:FI2kriloDpkkreAuV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
q8ib7r

Files

q8ib7r
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 452KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ