NerdQuest[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NerdQuest.exe
Size

359KB
MD5

ad3d13ef3728d60a261199cd0fc0c422
SHA1

02948f05529c4db1be787ca1e8fc44de106eba34
SHA256

6fc88c53540920eb8150396d2c5624f35797f7201b7b20c14f72cd5b926948c2
SHA512

f780688679c61a876494980dbe034798c45c5104e826cdb0d29d9e4e8be0f4da5cbcc6b15d0672b4d38bcb53a20a1b63a94a544726e249f47af2c179d191a697
SSDEEP

3072:vwyORLpPtRP0ZiDGsrCEy2gCq39qU4itRP0ZiDGsrCEy2gCq39qU4TlVw1B8dRPI:YOfPwo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NerdQuest.exe

Files

NerdQuest.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\minec\Documents\programming\Visual Studio Repos\NerdQuest\obj\Debug\NerdQuest.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ