QuantDrive_share[.]zip

resource
unpack001/Quant Drive/QuantDrive.exe

QuantDrive_share.zip

SHA256 409a992b812a08098a8b21b58341d19b5260f125c9558d0b034113d0ab2a8b06
MD5 8777280b885c539f133cb2bca7493738
SHA1 742efae857b02b9b346f5a2b2380fc78c5430265
SHA512 8870e770c3c316e7cdb65e1e5ec3c9ced79f9b22f1985420afb0d030c65f6265d3155de9c9c79b8e579a8e6d8f335449ec1e821af8117ded1208270eb54b4016
SSDEEP 98304:gN+kCdMWJ6F7USkhwnXeOh3U/vvVJzdcGmwoaiRFYmJI+t5qJSedwmML32R7:sCdEwOX13UfVvYRaoJTqOT3I
TLSH
T1664633EBCF947E067ED709EDC6CA62155B30BC7090C6A6A587C92A874CF00B9CB5C653
MD5 SHA1 SHA512 SSDEEP TLSH

Quant Drive/QuantDrive.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 e474a4311fde20abe83dd050aa6af17f096a5f08fb8dbb5aa9ec7e07490fc6dd
MD5 2dd7815241d99db5604ba2ae038af145
SHA1 c53f246d23e2fd77b242e352841d8d49de93cb4e
SHA512 06d36039b911737c739299665e1057c2a6d1981c69062a3ceed1f1730c81306a7d5de9cb06c68683b71dac7d49b84a38130d62ce7a6d2ce4fce6ec495fd63638
SSDEEP 49152:REBmU4cjCcXqPv1L9YzdzN09V1Hh641wMMipY+qKA9M3wd/t5XbnABwKeK9KyOJe:RG8IG/hwriW+tbL5OXE
TLSH
T14C665B03ECA115E9C1EAE63189729252BA717C496B3123D73B98F7382F77BD06A75700
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

489504

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

2.8MB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

310KB

Virtual Size

652KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

65KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

53KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Quant Drive/README.txt

SHA256 51f743a0b4218e4b31367016f3899af14726078d7aac5edf86120f689be9a7cd
MD5 806b19927061a18c23474ede4099cbbb
SHA1 3c74c9cdb35b7487e8b700854a9b230ed1ed3795
SHA512 902d1ebca227e577cf280a9a75912f38a0dc0a1be458738a552e96e2d0247333c0004af27305b0a3521ce77b61887bc2796d459dce0c7d66fa98d597a3b9fcf6
TLSH
T116F0F1AC30578421ECBE04EF1D59A8A3A3847646414A043B5D2C1788B96C3697B07452
MD5 SHA1 SHA512 TLSH

Quant Drive/data/payload.json.gz

SHA256 0b9cae764d4b056751083945ca2426847a72880e174c32df9aefff0b0c8dcb95
MD5 1726ad3dc446039b43b4b0753c0fc23e
SHA1 8d39f4e545ba562e02ef87fc0cecba5109c1b07d
SHA512 6a2b0ead00ae7ff4fa77b9c1c1be4c40da809bd0dcaddb83c6a522e3ba6514ab90cf721fb1c2acea68269517d3f3fb1f71cc48306abd95c16453b553667837d9
SSDEEP 49152:yHdwJyZHGgntQL3m4txklYGZoW61YfeEaycXDMi9f2J7pT7m:yHHNntA3m4tvGPyYfew+9fkJC
TLSH
T198E533E79F787D5627E10550C6EDA12A2929FDF0C067E9B487D6B8425CF0CB90E88633
MD5 SHA1 SHA512 SSDEEP TLSH

payload.json

SHA256 53af2cd3f0d23263c26500c8b24e8b8c37bc5c95360c64959c6e3b0d0f331080
MD5 eea5aaff0a384d174c31ba9a664492a6
SHA1 0187fc8e530bc0282ca18dea89c7295cf30e938a
SHA512 a5e6b7f3ae9ca9f5142000bc924e8ed6af4b3e024819dba3983f20f075b4322f0725b6b41d09c3616af3f7f598a72d3f4da9a64a649caa934e8c1b5fa737a51c
SSDEEP 49152:tw3stNu7wZ1HUF4gswZ4OUXmGx0pknfVESGrv65B7T+AJC8nee3FpnYGpTv0ODYk:p
TLSH
T101F65E7E83454EBADBAC0F8491ED290E12E4C257382C146D9BB36DCAEC7675AF03065D
MD5 SHA1 SHA512 SSDEEP TLSH

Quant Drive/data/state.json

SHA256 afbf9d0f3560b0fd7795e81c42a0a79ee6b6fc67e064f77826aee642cad28d91
MD5 a191475ae2bf7db9c7e320f7da455bbb
SHA1 05386f28d1614fecb1c7e329bd82417fb48dd452
SHA512 99be54b17edf17afbb20443b7bad40d221e22342a700692ada76f3ea0611d531ec1fa445df9c8958c439dbadbe118f03d4296625a4929b67a45ae510cb10be87
MD5 SHA1 SHA512