eqicord[.]exe | Triage™

General

Target
eqicord.exe
Size 11.5MB
Sample260910-ryqqlsvdqc
SHA256 3a9fa4b6657d98ae6ae3ab34e490b5d1d322fcf6c516be5e8eef20d58557df58
MD5 c5820dc59a7ff56489f5f854667c549c
SHA1 5c7f15581dba76479de64157b4b6415764f190ca
SHA512 0f552e8ac44a8155f4338bfa03414b1a475a6bcd1df0cac04fb76c4be9cc2c5811c27836d0569fa0be6934ca4fa98bf9dab4f9775d3c482166ef2ca18194c96a
SSDEEP 98304:CXbsE8OP9cDGPuZ7nR5/NucwyR2XNNKkjdGl+u9fX2I+zSdrMa1HTViYYRIMdFRo:C4EjXPiPbMy9GFkDPx
TLSH
T107C65B47E8A214E8C1AAE1318663B633FB307C4907256BE71B90E6346F77BD05EB9750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eqicord.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3a9fa4b6657d98ae6ae3ab34e490b5d1d322fcf6c516be5e8eef20d58557df58
MD5 c5820dc59a7ff56489f5f854667c549c
SHA1 5c7f15581dba76479de64157b4b6415764f190ca
SHA512 0f552e8ac44a8155f4338bfa03414b1a475a6bcd1df0cac04fb76c4be9cc2c5811c27836d0569fa0be6934ca4fa98bf9dab4f9775d3c482166ef2ca18194c96a
SSDEEP 98304:CXbsE8OP9cDGPuZ7nR5/NucwyR2XNNKkjdGl+u9fX2I+zSdrMa1HTViYYRIMdFRo:C4EjXPiPbMy9GFkDPx
TLSH
T107C65B47E8A214E8C1AAE1318663B633FB307C4907256BE71B90E6346F77BD05EB9750
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

22926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Documents and Settings\1134\My Documents\Visual Studio 2008\Projects\72389 binder stub\72389 binder stub\obj\Debug\72389 binder stub.pdb