qcxtqseqebql[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

qcxtqseqebql.exe
Size

906KB
MD5

5be2d003e408042bb49e562408a56b1a
SHA1

c38b4ce70381d017e19ca7cdae1595723dbca0d3
SHA256

4b39395783ee4f8ab3197c93738788d8f6b375bbe57a2f2337e5ba122bcd4fa8
SHA512

7dc6838bc8c015f430d691be3cc2aa8d2974ffb52c9ec00dbf36eb7633e343ce536606b075f4ac71e25b3e1c189fcf1c4ff3b90f609264d8b642aedfaf80a801
SSDEEP

12288:Whc5AL/ak6i64ikkc4AWpORikNoVqM3hgg9S6hz5AsG6o2Pxv:Wm4R6i6jTAWpNgcxNsoAbXuv

Score

1^/10

Malware Config

Signatures

Files

qcxtqseqebql.exe
.exe windows:4 windows x64 arch:x64

Password: admin

06774d296214e02dcbba44678c0ac3e9

Code Sign

33:00:59:f8:b6:da:86:89:70:6f:fa:1b:d9:00:00:00:59:f8:b6
Certificate

Issuer

CN=Microsoft Azure TLS Issuing CA 06

Not Before

04-10-2022 23:23

Not After

29-09-2023 23:23

Subject

CN=www.microsoft.com

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign

f6:bf:79:6f:fc:eb:f0:fc:af:23:3e:f8:d8:06:90:d0:19:ef:9e:d9:a5:b0:cd:40:a1:8f:1e:b1:b1:5f:6e:3f
Signer

Actual PE Digest

f6:bf:79:6f:fc:eb:f0:fc:af:23:3e:f8:d8:06:90:d0:19:ef:9e:d9:a5:b0:cd:40:a1:8f:1e:b1:b1:5f:6e:3f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery

msvcrt

__C_specific_handler
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fileno
_fmode
_get_osfhandle
_initterm
_onexit
_setjmp
_setmode
_wfopen
abort
calloc
exit
fflush
fprintf
fputc
free
fwrite
longjmp
malloc
memchr
memcpy
memset
printf
setvbuf
signal
strcmp
strlen
strncmp
strstr
vfprintf

Sections

.text
Size: 543KB - Virtual size: 543KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 350KB - Virtual size: 350KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 95KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: admin

06774d296214e02dcbba44678c0ac3e9

Code Sign

33:00:59:f8:b6:da:86:89:70:6f:fa:1b:d9:00:00:00:59:f8:b6Certificate

Extended Key Usages

Key Usages

f6:bf:79:6f:fc:eb:f0:fc:af:23:3e:f8:d8:06:90:d0:19:ef:9e:d9:a5:b0:cd:40:a1:8f:1e:b1:b1:5f:6e:3fSigner

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 543KB - Virtual size: 543KB

.data Size: 512B - Virtual size: 288B

.rdata Size: 350KB - Virtual size: 350KB

.pdata Size: 2KB - Virtual size: 2KB

.xdata Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 95KB

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

33:00:59:f8:b6:da:86:89:70:6f:fa:1b:d9:00:00:00:59:f8:b6
Certificate

f6:bf:79:6f:fc:eb:f0:fc:af:23:3e:f8:d8:06:90:d0:19:ef:9e:d9:a5:b0:cd:40:a1:8f:1e:b1:b1:5f:6e:3f
Signer

.text
Size: 543KB - Virtual size: 543KB

.data
Size: 512B - Virtual size: 288B

.rdata
Size: 350KB - Virtual size: 350KB

.pdata
Size: 2KB - Virtual size: 2KB

.xdata
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 95KB

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B