0de1928c490a0779182cb380a7022f9c8ae22053f3b12a189428ac3883a368b6 | Triage

Sharing

General

Target

0de1928c490a0779182cb380a7022f9c8ae22053f3b12a189428ac3883a368b6
Size

625KB
MD5

03df3341993f19e0bece8433b46413ca
SHA1

5551824cf0eb341cfd5c37ec632977ebab612c90
SHA256

0de1928c490a0779182cb380a7022f9c8ae22053f3b12a189428ac3883a368b6
SHA512

ee09aa4f49ae74e0a742aed6c3a495507aea2f08c80cfbaac1fc58931622d16431531dd4111531b1db0bb9ae515b939f4ce1fa8001d9a3208b95a0a54bf68390
SSDEEP

12288:I5scxI3pB+4OJUR36gNxrswUHL5C+Q5K51SyyrwbyJfCz7WCzWr0:OscKa4DxNxr/Ur5J1SyebKuMo0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Design Qualification Protocol Sample.scr

Files

0de1928c490a0779182cb380a7022f9c8ae22053f3b12a189428ac3883a368b6
.zip
Design Qualification Protocol Sample.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Wqyk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 635KB - Virtual size: 635KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ