QTTabBar_1043[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QTTabBar_1043.zip
Size

3.6MB
MD5

4984c70712952e9d85f7925903d9d1d2
SHA1

b1b00a2367f4479a226b562e06880beb9fbc90ae
SHA256

1a3b3469a0bfef5edcdefb87007fee09f1302f2b71b00b17e97f9dc29c09f726
SHA512

cdf293a62a515f945925d39004d056806488f4054c01311cca1c1e54816a9fd380fb996565fd6b565f88956b8eea9e2ccfd701f4ad9238ee1abeeb8760839077
SSDEEP

49152:CqYyM5wYJuA7NT4YfwygTrZ+u4iKj1YY8XsvlJyykX5SGXaXN9S9qkg8FbMXld1n:DYt5jhkYr29KeYGylJyyEYLS9pgEG1L/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QTTabBar.exe

Files

QTTabBar_1043.zip
.zip
QTTabBar.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ