Quarknova[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Quarknova.exe
Size

4.2MB
MD5

5eb279cc197f50092c08f262fb78257b
SHA1

57c0e12f579aebb6ec715dada048cb95a8011942
SHA256

51be71b29050a31dc622ff2ba1f6c8eeddcc29e6021919f0a1176585f99d27eb
SHA512

13d6c3106d515e38dd7c0fe68227a9757aa3e02a3989cfa9b5176dd8c5a92458c89acab1b9da6568589379b4d5a303192c0fd512bd6db19dbe9f91f03b9e86fe
SSDEEP

49152:C/ZIAj9gsCvpuh4Dwt4w1OxLRry4RySch2TSQGa3EkiNNAcGf3UUCNSjCCOIJe9L:jmKUh4I4BxNrczQ9UrDAVfGAVOIsEqx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quarknova.exe

Files

Quarknova.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Visual Studio Projects\Quarknova\Quarknova\obj\Release\Quarknova.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ