Static task
static1
Behavioral task
behavioral1
Sample
e0231c0c2dc32da004098013ab115ae2eac8c1b759ebd770d08d993910e22b48.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e0231c0c2dc32da004098013ab115ae2eac8c1b759ebd770d08d993910e22b48.exe
Resource
win10v2004-20220812-en
General
-
Target
e0231c0c2dc32da004098013ab115ae2eac8c1b759ebd770d08d993910e22b48
-
Size
93KB
-
MD5
431e790cbc414ff3c137b0dc3fd95800
-
SHA1
5a52290bead666434b9908c0198d9011cb095bd4
-
SHA256
e0231c0c2dc32da004098013ab115ae2eac8c1b759ebd770d08d993910e22b48
-
SHA512
012d0ccf9f15d9b0cf20eb174cdcc8f6000c65033fd5f6e2ddc4f44b10bffc2f5b9eb18f029c423e54ab38adfcb3748656aaad0eecafcd44c97c7bad2a205af6
-
SSDEEP
1536:QpUKOCUdRKIc77ioUzBPL68cYiyZ8GFuUZM4LyRYj5ZHeePRXgQ:jKM3mBUB6XYiyHFV/+Yj5Z+VQ
Malware Config
Signatures
Files
-
e0231c0c2dc32da004098013ab115ae2eac8c1b759ebd770d08d993910e22b48.exe windows x86
4936c2634c9661f7322a9b5c71132d6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
qtcore4
?exists@QDir@@QBE_NXZ
??0QDir@@QAE@ABVQString@@@Z
??6QDebug@@QAEAAV0@PBD@Z
??1QDir@@QAE@XZ
?entryInfoList@QDir@@QBE?AV?$QList@VQFileInfo@@@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
?entryList@QDir@@QBE?AVQStringList@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
?convertSeparators@QDir@@SA?AVQString@@ABV2@@Z
?path@QDir@@QBE?AVQString@@XZ
?qDebug@@YA?AVQDebug@@XZ
?relativeFilePath@QDir@@QBE?AVQString@@ABV2@@Z
??0QFileInfo@@QAE@ABVQString@@@Z
?isFile@QFileInfo@@QBE_NXZ
?isSymLink@QFileInfo@@QBE_NXZ
?isDir@QFileInfo@@QBE_NXZ
?mkpath@QDir@@QBE_NABVQString@@@Z
?copy@QFile@@SA_NABVQString@@0@Z
?setPermissions@QFile@@SA_NABVQString@@V?$QFlags@W4Permission@QFile@@@@@Z
?detach@QListData@@QAEPAUData@1@H@Z
?qFree@@YAXPAX@Z
??0QFileInfo@@QAE@ABV0@@Z
??1QFileInfo@@QAE@XZ
?fromAscii@QChar@@SA?AV1@D@Z
?codecForCStrings@QString@@0PAVQTextCodec@@A
??8QString@@QBE_NABV0@@Z
??8QString@@QBE_NABVQLatin1String@@@Z
?toNativeSeparators@QDir@@SA?AVQString@@ABV2@@Z
?separator@QDir@@SA?AVQChar@@XZ
??0QProcess@@QAE@PAVQObject@@@Z
?startDetached@QProcess@@SA_NABVQString@@@Z
??1QProcess@@UAE@XZ
?remove@QFile@@SA_NABVQString@@@Z
?shared_null@QString@@0UData@1@A
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
??4QString@@QAEAAV0@ABV0@@Z
?absoluteFilePath@QFileInfo@@QBE?AVQString@@XZ
??1QDebug@@QAE@XZ
??6QDebug@@QAEAAV0@ABVQString@@@Z
?tempPath@QDir@@SA?AVQString@@XZ
?fromAscii@QString@@SA?AV1@PBDH@Z
?append@QString@@QAEAAV1@ABV1@@Z
??0QString@@QAE@ABV0@@Z
??YQString@@QAEAAV0@VQChar@@@Z
??0QCoreApplication@@QAE@AAHPAPAD@Z
?qDebug@@YAXPBDZZ
??1QCoreApplication@@UAE@XZ
?fromAscii_helper@QString@@CAPAUData@1@PBDH@Z
?free@QString@@CAXPAUData@1@@Z
?rmdir@QDir@@QBE_NABVQString@@@Z
??1QString@@QAE@XZ
msvcr90
_CxxThrowException
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_crt_debugger_hook
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
exit
__CxxFrameHandler3
_controlfp_s
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE