Win Quick Config[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Win Quick Config.exe
Size

3.7MB
MD5

11a02e5a408789037713b8d54b1274c9
SHA1

24c31db3ff856a855e9f3b99ccfa528809537b8c
SHA256

3feaec930748c0217b9201c660288196dc972dddb85211224a21a282fba4650f
SHA512

749cfc58be6d72200df5c07155006851e265a66f6dc5edf146ece91385bf6e3dd0268a2d94c9c381a7208b1fbdd10759cd6107466a167c272640322fa7f08026
SSDEEP

98304:NonccIUbMpphLPEIccIUbMpphLPEUmF6L6NesezlkqXf0Fk82kBQJ:aNIUApphLJNIUApphLFy6L6NesepkSIa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Win Quick Config.exe

Files

Win Quick Config.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\fhnir\Documents\Projects\Win Quick Config by NC\obj\Release\Win Quick Config.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ