jqr_1[.]2[.]1[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

jqr_1.2.1.zip
Size

783KB
MD5

f968ffce7a67da68dadf6b8a31ca96c3
SHA1

d62988c1cccb0301684350f7c566785681758c79
SHA256

76061037619657facd80992f6c43f49d756b6367be6fb0e9cec7f61f5284025a
SHA512

1a6a2ea60137bc41d2ffc648393f4abb2707b7940a835a61202990d2cef5fdc8b907e0aea8b4accaf8e8da9fbf88378c8abd29a6cc90c2781a4b6ea6ee2d9c1a
SSDEEP

24576:H/k96g2V1AiYq5j5RHv+aBOJdqqKg/s6R:HscHyiYqNecOJdqYXR

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/jqr/libs/i386/jqr.dll
unpack001/jqr/libs/x64/jqr.dll

Files

jqr_1.2.1.zip
.zip
jqr/DESCRIPTION
jqr/INDEX
jqr/LICENSE
jqr/MD5
jqr/Meta/Rd.rds
.gz
Rd.rds
jqr/Meta/data.rds
.gz
data.rds
jqr/Meta/features.rds
.gz
features.rds
jqr/Meta/hsearch.rds
.gz
hsearch.rds
jqr/Meta/links.rds
.gz
links.rds
jqr/Meta/nsInfo.rds
.gz
nsInfo.rds
jqr/Meta/package.rds
.gz
package.rds
jqr/NAMESPACE
jqr/NEWS.md
jqr/R/jqr
.js
jqr/R/jqr.rdb
jqr/R/jqr.rdx
.gz
jqr.rdx
jqr/data/Rdata.rdb
jqr/data/Rdata.rds
.gz
jqr/data/Rdata.rdx
.gz
jqr/help/AnIndex
jqr/help/aliases.rds
.gz
jqr/help/jqr.rdb
jqr/help/jqr.rdx
.gz
jqr/help/paths.rds
.gz
jqr/html/00Index.html
.html
jqr/html/R.css
jqr/libs/i386/jqr.dll
.dll windows x86

068f49eed348522c952e0a576abf4396

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

r

R_CHAR
R_ClassSymbol
R_ClearExternalPtr
R_ExternalPtrAddr
R_MakeExternalPtr
R_NilValue
R_RegisterCFinalizerEx
R_registerRoutines
R_useDynamicSymbols
Rf_ScalarString
Rf_asInteger
Rf_asLogical
Rf_cons
Rf_error
Rf_errorcall
Rf_length
Rf_mkCharCE
Rf_mkString
Rf_protect
Rf_setAttrib
Rf_unprotect
STRING_ELT

kernel32

CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
ReleaseSemaphore
ResetEvent
ResumeThread
SetCriticalSectionSpinCount
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW

msvcrt

__dllonexit
__mb_cur_max
__setusermatherr
_amsg_exit
_beginthreadex
_close
_endthreadex
_environ
_errno
_exit
_fdopen
_fileno
_fstat
_ftime
_fullpath
_get_osfhandle
_hypot
_initterm
_iob
_isatty
_j0
_j1
_jn
_lock
_onexit
_open
_nextafter
_setjmp3
_snwprintf
_stat
_strdup
_unlock
_wfopen
_y0
_y1
abort
acos
asin
atan
atan2
_yn
atoi
calloc
clearerr
cosh
exit
fclose
feof
ferror
fflush
fgets
fprintf
fputc
fread
free
frexp
fwprintf
fwrite
getc
getenv
gmtime
localtime
localeconv
log10
longjmp
malloc
mktime
mbstowcs
memchr
memcmp
memcpy
memmove
memset
printf
qsort
raise
realloc
setlocale
sinh
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strncpy
strrchr
strspn
strstr
time
tan
tanh
vfprintf
wcscpy
wcslen
wcstombs

shlwapi

PathIsRelativeA

user32

MessageBoxW

Exports

Exports

C_jqr_feed
C_jqr_new
R_init_jqr

Sections

.text
Size: 470KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
jqr/libs/i386/symbols.rds
.gz
jqr/libs/x64/jqr.dll
.dll windows x64

647be65f51422d2f6abc0d2706191f33

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

r

R_CHAR
R_ClassSymbol
R_ClearExternalPtr
R_ExternalPtrAddr
R_MakeExternalPtr
R_NilValue
R_RegisterCFinalizerEx
R_registerRoutines
R_useDynamicSymbols
Rf_ScalarString
Rf_asInteger
Rf_asLogical
Rf_cons
Rf_error
Rf_errorcall
Rf_length
Rf_mkCharCE
Rf_mkString
Rf_protect
Rf_setAttrib
Rf_unprotect
STRING_ELT

kernel32

CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
ReleaseSemaphore
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetCriticalSectionSpinCount
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
__C_specific_handler

msvcrt

___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
__setusermatherr
_amsg_exit
_beginthreadex
_close
_endthreadex
_environ
_errno
_exit
_fdopen
_fileno
_fstat64
_ftime
_fullpath
_get_osfhandle
_gmtime64
_initterm
_isatty
_j0
_j1
_jn
_localtime64
_lock
_hypot
_mktime64
_nextafter
_onexit
_open
_setjmp
_snwprintf
_stat64
_strdup
_time64
_unlock
_wfopen
_y1
_yn
_y0
abort
acos
asin
atan
atan2
calloc
clearerr
cosh
exit
fclose
feof
ferror
fflush
fgets
fprintf
fputc
fread
free
frexp
fwprintf
fwrite
getc
getenv
localeconv
log10
longjmp
malloc
mbstowcs
memchr
memcmp
memcpy
memmove
memset
printf
qsort
raise
realloc
setlocale
signal
sinh
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strncpy
strrchr
strspn
strstr
tan
tanh
vfprintf
wcscpy
wcslen
wcstombs

shlwapi

PathIsRelativeA

user32

MessageBoxW

Exports

Exports

C_jqr_feed
C_jqr_new
R_init_jqr

Sections

.text
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
jqr/libs/x64/symbols.rds
.gz

Sharing

General

Malware Config

Signatures

Files

068f49eed348522c952e0a576abf4396

Headers

File Characteristics

Imports

r

kernel32

msvcrt

shlwapi

user32

Exports

Exports

Sections

.text Size: 470KB - Virtual size: 470KB

.data Size: 19KB - Virtual size: 18KB

.rdata Size: 329KB - Virtual size: 329KB

/4 Size: 63KB - Virtual size: 63KB

.bss Size: - Virtual size: 4KB

.edata Size: 512B - Virtual size: 110B

.idata Size: 5KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 48B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 13KB - Virtual size: 13KB

647be65f51422d2f6abc0d2706191f33

Headers

File Characteristics

Imports

r

kernel32

msvcrt

shlwapi

user32

Exports

Exports

Sections

.text Size: 400KB - Virtual size: 400KB

.data Size: 19KB - Virtual size: 19KB

.rdata Size: 339KB - Virtual size: 338KB

.pdata Size: 14KB - Virtual size: 14KB

.xdata Size: 16KB - Virtual size: 16KB

.bss Size: - Virtual size: 6KB

.edata Size: 512B - Virtual size: 110B

.idata Size: 6KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 104B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 470KB - Virtual size: 470KB

.data
Size: 19KB - Virtual size: 18KB

.rdata
Size: 329KB - Virtual size: 329KB

/4
Size: 63KB - Virtual size: 63KB

.bss
Size: - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 110B

.idata
Size: 5KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 13KB - Virtual size: 13KB

.text
Size: 400KB - Virtual size: 400KB

.data
Size: 19KB - Virtual size: 19KB

.rdata
Size: 339KB - Virtual size: 338KB

.pdata
Size: 14KB - Virtual size: 14KB

.xdata
Size: 16KB - Virtual size: 16KB

.bss
Size: - Virtual size: 6KB

.edata
Size: 512B - Virtual size: 110B

.idata
Size: 6KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 104B

.reloc
Size: 2KB - Virtual size: 2KB