QCEx_function[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QCEx_function.dll
Size

41KB
MD5

72a11a2f62d4740206f04ec232f44080
SHA1

ba32fcfb3b5ac4f96cd0567bea01ef6800737773
SHA256

1f1332998b35ca07365224238049b0f716feffd8c58620eb7118aded7cbf4487
SHA512

1ca74cf257a15956e8a19c422dbb07860d680d13661af78e38204eef547876d8a5490231b61686924ada6a262f6ab21f30445ead32235783e23f9777e8c9abef
SSDEEP

768:eqk7tyhwHcrFl2IkGw2qweK4T0FbR15pZZRtNsoMew6u2pplqKnPTNQOhf0mea2c:eqWty2MfwceK4RK6Owg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QCEx_function.dll

Files

QCEx_function.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetModelRoles
GetOtherRoles
GetPosRoles
GetRptRoles

Sections

CODE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 85B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ