qres[.]zip | Triage™

General

Target
qres.zip
Size 4KB
Sample260718-e2f95ags9r
SHA256 5b268a80e2a8a6972c457a99cfc6a41dbe7057772a0ff0ebfb9769870140376d
MD5 9b2bfcc30d567c8d4ca01a01866cbfa4
SHA1 7e3b8d8c7f629c1ee403a0604aeaed98a3ede4b0
SHA512 b86f9ff50fc5100624d3ff715f4318f88ff930affe55e62b667cc95a58ee354e0cb3001aabc779f709602fa706ae93bc799492d8105101c3ce9f247732b7e431
SSDEEP 96:BxV13xaf6JD/SxQeK2TW3PRezvZU4iKeB0xJ6sMevJ76YI:p1P/SyeK2W52RUlGJxheYI
TLSH
T1B0917D464237429CEA3FBBA81D1F5C625A18E3179821FCBB8D85118ADF8054878DB4BB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QRes.exe

File Explorer

qres.zip

.zip 4KB
QRes.exe

.exe 4KB
qres.htm

.html 5KB

qres.zip

SHA256 5b268a80e2a8a6972c457a99cfc6a41dbe7057772a0ff0ebfb9769870140376d
MD5 9b2bfcc30d567c8d4ca01a01866cbfa4
SHA1 7e3b8d8c7f629c1ee403a0604aeaed98a3ede4b0
SHA512 b86f9ff50fc5100624d3ff715f4318f88ff930affe55e62b667cc95a58ee354e0cb3001aabc779f709602fa706ae93bc799492d8105101c3ce9f247732b7e431
SSDEEP 96:BxV13xaf6JD/SxQeK2TW3PRezvZU4iKeB0xJ6sMevJ76YI:p1P/SyeK2W52RUlGJxheYI
TLSH
T1B0917D464237429CEA3FBBA81D1F5C625A18E3179821FCBB8D85118ADF8054878DB4BB
MD5 SHA1 SHA512 SSDEEP TLSH

QRes.exe

IMPHASH f3899020c1ea8bbf0c84a80689caa590
SHA256 66252b80e1f62e284d60ddfc340fa7d6b651929d85360cee0f78cc04a8c5e343
MD5 ca493006d55ebda9f97c7848cee144a7
SHA1 82671680c2fd7037e3982da62227bfa9611f91ee
SHA512 35f0eada98d97edfea875f1301eeb84fb81d9e1f59a63098bb73b963bf6d463fb5c780840a3aacbcf6d2e7fb8fbda139bb1c61625b6f334cf4fe6d5677fcc035
SSDEEP 96:XsK1jHA1J4NV/HMjiNOi7XV8jr1enQYzjaADfNP4oyn:dj/Hco8jrgQoja2fNP4oyn
TLSH
T18B912B0BEF987633DAEA45F83D0CD3506B339948C6D79F4726146368226502BD5F4787
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6984

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

qres.zip

QRes.exe

kernel32

user32

gdi32

advapi32

msvcrt

generic

qres.htm

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

qres.zip

QRes.exe

kernel32

user32

gdi32

advapi32

msvcrt

generic

qres.htm