Quantum_steal_remake-protected[.]dll | Triage

Sharing

General

Target

Quantum_steal_remake-protected.dll
Size

372KB
MD5

52900dbee905905c99e9cec06b81166a
SHA1

7274cff39b71a81916272ec9f59061a524a7000b
SHA256

e80b9337398c95cd5ba54854ab3f10962e2faba7cfd9bf66219f952cb72d50bf
SHA512

a9437ab438ba29aa11cede790b8eb20a3d7666c31a0dec2f3090d8b43ca554fd2fdd1fddcb22969bb6e9482e255e4757d9b39da56457142a2fef3ab57226a437
SSDEEP

6144:/c1tgSqFG1smBqu0w6s81M3aQwd3eZ4v0hxSf9Gdgtn1so+DY:/ctpqFUsBw6set5ethk1eg8o+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quantum_steal_remake-protected.dll

Files

Quantum_steal_remake-protected.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 370KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ