The QMXQ exe File Malware Analysis

Technical Analysis

File Name	QMXQ.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.210.174
Database Version	2025-03-13 19:00:54 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	f55de5a46f51e9fa98b9513d57c361e9
SHA1	495ba19b790d31c072a1446cea6813443cba8d83
SHA256	b80c4d983bec32a3b00ca8d64937040d7b3886c0f493f591ec860e3bfa99ba51
SHA512	a37afcab09f5c8cd6c0e42848125bb45dba1813dcdba44d2a1593d6b2b60648c057c223b2a2d9c099227ebce9a2070e8890b24e1f9465e902bb81773c903b3eb
ImpHash	965e162fe6366ee377aa9bc80bdd5c65

PE Analysis

Basic Information

▼

Icon	Hash: e3398652810264951f03c7463a20a16b Fuzzy: 7b303b99564165eadb247d64411b19ea dHash: 96ab69515169aa96
Image Base	`0x140000000`
Entry Point	`0x14000ce20`
Compilation Time	2025-03-13 17:33:43
Checksum	0x00357f86 (Actual: 0x00357f86)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	5 libraries USER32, COMCTL32, KERNEL32, ADVAPI32, GDI32
Exports	0 functions
Resources	3 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	173,264 bytes	173,568 bytes	6.49 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7F9D412C28E642C8E84BE872E83B4F9F`
`.rdata`	`0x0002c000`	77,112 bytes	77,312 bytes	5.76 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`9D1E37405D94D68C8B8B13C1A296DEC9`
`.data`	`0x0003f000`	21,328 bytes	3,584 bytes	1.83 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`2B048C55A32EFA293A19BC62CCE0E4B8`
`.pdata`	`0x00045000`	8,844 bytes	9,216 bytes	5.32 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`FF7327F24043DEE11DB09E993F85CAAB`
`.fptable`	`0x00048000`	256 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.rsrc`	`0x00049000`	69,172 bytes	69,632 bytes	2.77 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`2CE8A7528F2E892734C7734D1B12E46D`
`.reloc`	`0x0005a000`	1,892 bytes	2,048 bytes	5.26 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`F390B176355C1AE2E1386B761ADD6032`

Resource Analysis

▼

Total Resources: 3 (68,937 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	1	67,624 bytes	98.1%
RT_GROUP_ICON	1	20 bytes	0%
RT_MANIFEST	1	1,293 bytes	1.9%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The QMXQ.exe File Analysis