qraid[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

qraid.exe
Size

29.9MB
MD5

7456309b8fc3cf03bb067fe741eed818
SHA1

4ed88c284c7f107e4915444b23d621283e57bc11
SHA256

ac9b817bcd31ac35bdf76a60ef0655dc884f4876f7153df7cf7986eb342333ad
SHA512

419fd0e7f250522427dbfa71d253f803de8cc2a511db8704a2c32fd491e82ca6b5d765f551258c2147c46f6cacb4e71256c9b255c9f123f9cccbe07c85a6f468
SSDEEP

393216:B8ZyaAMPNKPh1ITaIyFjSkZJjVl/Ozv9o08v9Ev+/7Q83ULnMbX4FyB0U:B80J1c3aJrIm5qu7X3wncXVBv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
qraid.exe

Files

qraid.exe
.exe windows:0 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

;::::; ;::::; :; ;:::::' :; ;:::::; ;. ,:::::' ; OOO\ ::::::; ; OOOOO\ ;:::::; ; OOOOOOOO ,;::::::; ;'

Sections

qRaid
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

onTop
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26.3MB - Virtual size: 26.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ