QUOD[.]exe | Triage™

Resubmissions

19/07/2026, 08:18

19/07/2026, 08:13

Target
QUOD.exe
Size 64KB
Sample260719-j4vmrafv4j
SHA256 90dd5817d9afc0016bf0f836d2a0da135b5f6c3dbdaf7e7b038e9b1ae600ddf3
MD5 c94ab642af5ac361461cd6fcdd715411
SHA1 7575b43e551c25964f780ff1e0d8babce1d9bad7
SHA512 fd3be99050904da0d3a0ffa489d7652f4b239c37566ddeb817a513bed2e5b1d7e6fefa3e011b6feea35dad36bd3b03b60a454bc9c104af1a01a1e6f5939c7afe
SSDEEP 1536:AQFV0mySYlEPSS3TYDao2aN2JeFQtNfPRSdp2+uUGz44Deh:7L0rSK+oZQD95Z7De
TLSH
T1EB53F236A592F251DA8FEBB402CB7C1954ED97286200CB4F39D839780D27738E555B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOD.exe

SHA256 90dd5817d9afc0016bf0f836d2a0da135b5f6c3dbdaf7e7b038e9b1ae600ddf3
MD5 c94ab642af5ac361461cd6fcdd715411
SHA1 7575b43e551c25964f780ff1e0d8babce1d9bad7
SHA512 fd3be99050904da0d3a0ffa489d7652f4b239c37566ddeb817a513bed2e5b1d7e6fefa3e011b6feea35dad36bd3b03b60a454bc9c104af1a01a1e6f5939c7afe
SSDEEP 1536:AQFV0mySYlEPSS3TYDao2aN2JeFQtNfPRSdp2+uUGz44Deh:7L0rSK+oZQD95Z7De
TLSH
T1EB53F236A592F251DA8FEBB402CB7C1954ED97286200CB4F39D839780D27738E555B4F
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

297360

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths