QUIIIIICK[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QUIIIIICK.rar
Size

21.7MB
MD5

dcb1f3157c077e5df4143f7c25f6c11d
SHA1

2eab8051f6da8ab5bcb6351d118aa7832ad6fe72
SHA256

181d5cd54aea5c5df054d8c46eae072e1dc0915492f6f9a02f0cab2a955bc99d
SHA512

55fdc7ed92d2b112f195f00ea1ef3980d14234b796c02c1e887375d794661ab253e51e6e25ff193b7c3ec0d781be3827864059a8174536e934dee513d3c12550
SSDEEP

393216:FfpLV01bxa92vAd6ffBUUyN70yOoY/lFPiWTQHijWolFBHFIuV6PJ4E5G:FfpLV0l09YRg4S+lxi3a76E6al

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quick.exe

Files

QUIIIIICK.rar
.rar

Password: infected
Quick.exe
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

��+�
Size: - Virtual size: 32.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

).�$
Size: 19.1MB - Virtual size: 19.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 186KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
登录码.txt
背景.bmp