bqahpsa[.]exe | Triage

Sharing

General

Target

bqahpsa.exe
Size

36KB
MD5

4be0d206f0402b1022dfdd7257360f00
SHA1

5a277f9a2a691675c366dc19b98e16cac3431f19
SHA256

029b1b65bb15766847c4f8ac997c9b0ca73772028926d65faaf496a0bea44250
SHA512

67167eba4a30cd39ecd763dcdd601e0793ead09b2aacbe6b225c25ed80d572b611b2a82f0011ce7c1585e2ee81b768c60dc6d094851c4cb2f6adc6b5fe997840
SSDEEP

384:jqi6V8jEW67yoYQgz2ZjDllp4RtlXzdrEXR6Jux8H4UIl:jZ6wVzqZjDWNjdoRwIl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bqahpsa.exe

Files

bqahpsa.exe
.exe windows:4 windows x86 arch:x86

32ea871963a26405a921f9902baefdfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord516
ord626
ord666
ord598
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord319
ProcCallEngine
ord535
ord570
ord648
ord573
ord685
ord100
ord579
ord320
ord321

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ