QuantumBuilder[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QuantumBuilder.exe
Size

1.5MB
MD5

b478e43f9c9ac29096faeefdfc1a0715
SHA1

22a62010fa1a5f5b28aa2613a40b872f78051384
SHA256

76ff43fbda2f4610cd101f93b8dfedea74c3f120f02c25d48525af3e7dfbbb20
SHA512

86c35cd8102788bfe3d38b2ce4608b11a755efd5778cb0f7cc1d06768385cabc0329bf813f8ae590a5be582fd327a43b486bc302c6a1c1cca18fcf4933701a9a
SSDEEP

24576:D0KvhZdgazcgCbvGKRV5MJbXxA3Mm11NQrpPGQwbWjKkD42jBs48BTIDL4qyJK:D0KJZd5o9bvGKRLAb/mMHwb7kD5yTcL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QuantumBuilder.exe

Files

QuantumBuilder.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 876KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uCare0
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uCare1
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ