Static task
static1
Behavioral task
behavioral1
Sample
a894b2a1c057aa3097da768a5b0942cb8f7085acca7277fe4e549cfc8753e830.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a894b2a1c057aa3097da768a5b0942cb8f7085acca7277fe4e549cfc8753e830.exe
Resource
win10v2004-20220812-en
General
-
Target
a894b2a1c057aa3097da768a5b0942cb8f7085acca7277fe4e549cfc8753e830
-
Size
605KB
-
MD5
5c4e5be306ed743430008f3f986c73cc
-
SHA1
46427692d87506da8cac9ef4ed7c24731080c6fa
-
SHA256
a894b2a1c057aa3097da768a5b0942cb8f7085acca7277fe4e549cfc8753e830
-
SHA512
84deca5f7d5c4c670710cf99f91f24373daaf387efc31b2384bdb99805f268a169cf8ac1602341a62adcf552041cf440d6e5befc1c02e774bb74003f1096450d
-
SSDEEP
12288:xg47XHtKJeUq6m6BiuH3YAZ4ZUgYebBvRzoqZq:xg47XtKY56RBiu3YAiugtv/Z
Malware Config
Signatures
Files
-
a894b2a1c057aa3097da768a5b0942cb8f7085acca7277fe4e549cfc8753e830.exe windows x86
0264926e4219e815b231219c1ef67c38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
core
_ZN11CommonUtils11GetSettingsE7QStringS0_
_ZN11CommonUtils14ThreadCountDecE7QStringS0_
_ZN11CommonUtils14ThreadCountIncE7QStringS0_
_ZN11CommonUtils15WaitThreadsStopEv
_ZN11CommonUtils20GetPluginLibraryPathEv
_ZN7StartupC1Eb
_ZN7StartupD1Ev
sdk
UTPS_GetLogDirectory
UTPS_Shutdown
UTPS_Startup
_Z13UTPS_SDK_INITv
_Z15UTPS_SDK_UNINITv
qtcore4
_Z15qAddPostRoutinePFvvE
_Z18qInstallMsgHandlerPFv9QtMsgTypePKcE
_Z5qFreePv
_Z6qDebugPKcz
_Z7qMemSetPvij
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_Z9qBadAllocv
_Z9qCriticalPKcz
_ZN10QByteArray7reallocEi
_ZN11QVectorData10reallocateEPS_iii
_ZN11QVectorData4freeEPS_i
_ZN11QVectorData8allocateEii
_ZN16QCoreApplication14addLibraryPathERK7QString
_ZN16QCoreApplication18setApplicationNameERK7QString
_ZN16QCoreApplication19applicationFilePathEv
_ZN16QCoreApplication19setOrganizationNameERK7QString
_ZN16QCoreApplication21setOrganizationDomainERK7QString
_ZN16QCoreApplication9argumentsEv
_ZN4QDir10setCurrentERK7QString
_ZN5QTime11currentTimeEv
_ZN5QTime5startEv
_ZN6QMutex4lockEv
_ZN6QMutex6unlockEv
_ZN6QMutexC1ENS_13RecursionModeE
_ZN6QMutexD1Ev
_ZN7QString11shared_nullE
_ZN7QString14fromWCharArrayEPKwi
_ZN7QString16codecForCStringsE
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString6appendERKS_
_ZN7QString9fromAsciiEPKci
_ZN7QString9fromUtf16EPKti
_ZN7QStringaSERKS_
_ZNK5QTime7elapsedEv
_ZNK5QTime8toStringERK7QString
_ZNK7QString11lastIndexOfERKS_iN2Qt15CaseSensitivityE
_ZNK7QString11toLocal8BitEv
_ZNK7QString5rightEi
_ZNK7QString5toIntEPbi
_ZNK7QString5utf16Ev
_ZNK7QString7toAsciiEv
_ZNK7QStringeqERK13QLatin1String
_ZNK7QStringeqERKS_
qtgui4
_ZN12QApplication13setWindowIconERK5QIcon
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN5QIconC1ERK7QString
_ZN5QIconD1Ev
qtwebkit4
_ZN8QWebViewC1EP7QWidget
kernel32
CloseHandle
CreateMutexA
CreateSemaphoreA
ExitProcess
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
mingwm10
__mingwthr_key_dtor
msvcrt
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
fputc
fputs
free
fwrite
malloc
realloc
signal
sprintf
strcmp
strcpy
user32
GetDesktopWindow
GetPropA
GetWindow
IsWindow
SendMessageW
libgcc_s_dw2-1
_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__emutls_get_address
__register_frame_info
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 152B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 508KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE