bqH2iRVfHsml5iwBQ[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bqH2iRVfHsml5iwBQ.exe
Size

183KB
MD5

719bf00d71e40b9b3fd18311fef8ee8e
SHA1

d3cacb75a20dbeae73cb293111296c17b9f18693
SHA256

4d094ccb4c54e964565fccaacfa75e2de86447bf92b658d6fb586928d8303b0e
SHA512

7685be651563c9d997ebc0a46d526553a39447e2e85099eb98b3f18e4fbac1da5791287a79c79c68c6acb60d9c3fffcbf20f0788b967757c41544fad05507bd4
SSDEEP

3072:PYBKLRUP52kH+LGP34oGKerVUzeeDXbwa21Dv9ua/aHyv46Qd2iE:PYBORUA+bwvp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bqH2iRVfHsml5iwBQ.exe

Files

bqH2iRVfHsml5iwBQ.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ