CQTask[.]Code[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CQTask.Code.dll
Size

45KB
MD5

3fcbc061e043676408df543b019cc918
SHA1

073b5392acb205b01fa74a34ccc898b35103ff1b
SHA256

f3e86da21442943ca7adcd25c84a880b7382845fb48781244ff676ce6da5aaa2
SHA512

009d346b1922ca91ae5e7d0023dad54e87d1780de161999299bb28e2350b23104fcbe5fb52e6ef435ff40981216e4520f4683dacb12d8b43e58d26637d3776bb
SSDEEP

768:Jb0s9c+Z8ADwIu8SwkcXYDq5czdoZvzsiQ2gZflC:phNZ8Qw37WYDWvQ/JZf8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CQTask.Code.dll

Files

CQTask.Code.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\工作\CQTask2.0\CQTask.Code\obj\Debug\CQTask.Code.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ