Trojan-Proxy[.]Win32[.]Qukart[.]vih-f3fc41259766e5a7a83c5fa45687b0f405b9911a6e1e1d4dbfe5ef3e367022d5

Sharing

Copy URL Twitter E-mail

General

Target
Trojan-Proxy.Win32.Qukart.vih-f3fc41259766e5a7a83c5fa45687b0f405b9911a6e1e1d4dbfe5ef3e367022d5
Size 77KB
Sample240229-lrq5xada41
SHA256 f3fc41259766e5a7a83c5fa45687b0f405b9911a6e1e1d4dbfe5ef3e367022d5
MD5 efa05ca7673cd9ca274f0071e9d4491c
SHA1 646d9f964e62d02ff5db965bd5ca29a3f6182ab4
SHA512 966341ad0544a767d9ead6e8836ebd38101fdb4f385bd1aff3c287dfd1531d95f43923ad0c0d816fa986374d1c391e3a37da668d002758bdb17e4f1a787b046e
SSDEEP 1536:0TM+XgA4Qi9syeyeLpTA4DstBDSSSS15bu7Y6YG2Lt8wfi+TjRC/D:QM+XjDusNxLZROGwf1TjYD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Trojan-Proxy.Win32.Qukart.vih-f3fc41259766e5a7a83c5fa45687b0f405b9911a6e1e1d4dbfe5ef3e367022d5

File Explorer

Trojan-Proxy.Win32.Qukart.vih-f3fc41259766e5a7a83c5fa45687b0f405b9911a6e1e1d4dbfe5ef3e367022d5

.exe 77KB

Trojan-Proxy.Win32.Qukart.vih-f3fc41259766e5a7a83c5fa45687b0f405b9911a6e1e1d4dbfe5ef3e367022d5

SHA256 f3fc41259766e5a7a83c5fa45687b0f405b9911a6e1e1d4dbfe5ef3e367022d5
MD5 efa05ca7673cd9ca274f0071e9d4491c
SHA1 646d9f964e62d02ff5db965bd5ca29a3f6182ab4
SHA512 966341ad0544a767d9ead6e8836ebd38101fdb4f385bd1aff3c287dfd1531d95f43923ad0c0d816fa986374d1c391e3a37da668d002758bdb17e4f1a787b046e
SSDEEP 1536:0TM+XgA4Qi9syeyeLpTA4DstBDSSSS15bu7Y6YG2Lt8wfi+TjRC/D:QM+XjDusNxLZROGwf1TjYD
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

196609

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.l1

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

prot

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Trojan-Proxy.Win32.Qukart.vih-f3fc41259766e5a7a83c5fa45687b0f405b9911a6e1e1d4dbfe5ef3e367022d5

generic