6518931530824fab7862475106bcae49afe787854bc3cd7601d6ef0e4f2bd24d

Sharing

Copy URL Twitter E-mail

General

Target

6518931530824fab7862475106bcae49afe787854bc3cd7601d6ef0e4f2bd24d
Size

34KB
MD5

b576af0b66b6d27935c3863ea864e24c
SHA1

78a9f592a03b21ec9964b5f55ce0bb7e4b2c9091
SHA256

6518931530824fab7862475106bcae49afe787854bc3cd7601d6ef0e4f2bd24d
SHA512

c9ceefcfbe0db5eec54aa4964713dc0e0b470eaee639bc8c08e38cf925f51b26033683ec45f0cfadb29ec43cd4ecea70fe0869f2c6c385c6c6da40b6caf497dd
SSDEEP

384:Lb/eRK1+C9upwGXWbUsQru48u+1TC3jvIOEkDiWEj/yewQYVct6Yya4DQhPc27Z:HMMTCzv/Kj/yeyvYPTBt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6518931530824fab7862475106bcae49afe787854bc3cd7601d6ef0e4f2bd24d

Files

6518931530824fab7862475106bcae49afe787854bc3cd7601d6ef0e4f2bd24d
.dll windows x64

206446bf6756ce008281efb8c8925dbb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

UnregisterHotKey
RegisterHotKey

qt5widgets

?qt_metacall@QWidget@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QWidget@@UEAAPEAXPEBD@Z
?staticMetaObject@QWidget@@2UQMetaObject@@B
?wheelEvent@QWidget@@MEAAXPEAVQWheelEvent@@@Z
?tabletEvent@QWidget@@MEAAXPEAVQTabletEvent@@@Z
?sizeHint@QWidget@@UEBA?AVQSize@@XZ
?showEvent@QWidget@@MEAAXPEAVQShowEvent@@@Z
?sharedPainter@QWidget@@MEBAPEAVQPainter@@XZ
?resizeEvent@QWidget@@MEAAXPEAVQResizeEvent@@@Z
?redirected@QWidget@@MEBAPEAVQPaintDevice@@PEAVQPoint@@@Z
?paintEvent@QWidget@@MEAAXPEAVQPaintEvent@@@Z
?paintEngine@QWidget@@UEBAPEAVQPaintEngine@@XZ
?moveEvent@QWidget@@MEAAXPEAVQMoveEvent@@@Z
?mouseReleaseEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?mousePressEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?mouseMoveEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?minimumSizeHint@QWidget@@UEBA?AVQSize@@XZ
?metric@QWidget@@MEBAHW4PaintDeviceMetric@QPaintDevice@@@Z
??0QWidget@@QEAA@PEAV0@V?$QFlags@W4WindowType@Qt@@@@@Z
?keyReleaseEvent@QWidget@@MEAAXPEAVQKeyEvent@@@Z
?keyPressEvent@QWidget@@MEAAXPEAVQKeyEvent@@@Z
?inputMethodQuery@QWidget@@UEBA?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QWidget@@MEAAXPEAVQInputMethodEvent@@@Z
?initPainter@QWidget@@MEBAXPEAVQPainter@@@Z
?hideEvent@QWidget@@MEAAXPEAVQHideEvent@@@Z
?heightForWidth@QWidget@@UEBAHH@Z
?hasHeightForWidth@QWidget@@UEBA_NXZ
?focusOutEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z
?focusNextPrevChild@QWidget@@MEAA_N_N@Z
?focusInEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z
?event@QWidget@@MEAA_NPEAVQEvent@@@Z
?enterEvent@QWidget@@MEAAXPEAVQEvent@@@Z
??1QWidget@@UEAA@XZ
?dropEvent@QWidget@@MEAAXPEAVQDropEvent@@@Z
?dragMoveEvent@QWidget@@MEAAXPEAVQDragMoveEvent@@@Z
?dragLeaveEvent@QWidget@@MEAAXPEAVQDragLeaveEvent@@@Z
?dragEnterEvent@QWidget@@MEAAXPEAVQDragEnterEvent@@@Z
?devType@QWidget@@UEBAHXZ
?contextMenuEvent@QWidget@@MEAAXPEAVQContextMenuEvent@@@Z
?closeEvent@QWidget@@MEAAXPEAVQCloseEvent@@@Z
?changeEvent@QWidget@@MEAAXPEAVQEvent@@@Z
?actionEvent@QWidget@@MEAAXPEAVQActionEvent@@@Z
?setVisible@QWidget@@UEAAX_N@Z
?winId@QWidget@@QEBA_KXZ
?leaveEvent@QWidget@@MEAAXPEAVQEvent@@@Z

qt5gui

?toString@QKeySequence@@QEBA?AVQString@@W4SequenceFormat@1@@Z
?count@QKeySequence@@QEBAHXZ
??1QKeySequence@@QEAA@XZ
??0QKeySequence@@QEAA@HHHH@Z
??AQKeySequence@@QEBAHI@Z
?modifiers@QKeyEvent@@QEBA?AV?$QFlags@W4KeyboardModifier@Qt@@@@XZ
??0QKeySequence@@QEAA@AEBVQString@@W4SequenceFormat@0@@Z

qt5core

?activate@QMetaObject@@SAXPEAVQObject@@PEBU1@HPEAPEAX@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?staticMetaObject@QObject@@2UQMetaObject@@B
?toLocal8Bit@QString@@QEGBA?AVQByteArray@@XZ
?data@QByteArray@@QEBAPEBDXZ
??1QByteArray@@QEAA@XZ
?shared_null@QHashData@@2U1@B
?nextNode@QHashData@@SAPEAUNode@1@PEAU21@@Z
?free_helper@QHashData@@QEAAXP6AXPEAUNode@1@@Z@Z
?rehash@QHashData@@QEAAXH@Z
?hasShrunk@QHashData@@QEAAXXZ
?detach_helper@QHashData@@QEAAPEAU1@P6AXPEAUNode@1@PEAX@ZP6AX0@ZHH@Z
?freeNode@QHashData@@QEAAXPEAX@Z
?allocateNode@QHashData@@QEAAPEAXH@Z
?shared_null@QListData@@2UData@1@B
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
??6QDebug@@QEAAAEAV0@AEBVQString@@@Z
??6QDebug@@QEAAAEAV0@PEBD@Z
??6QDebug@@QEAAAEAV0@H@Z
??1QDebug@@QEAA@XZ
??1QObject@@UEAA@XZ
??0QObject@@QEAA@PEAV0@@Z
?QStringList_join@QtPrivate@@YA?AVQString@@PEBVQStringList@@PEBVQChar@@H@Z
?end@QListData@@QEBAPEAPEAXXZ
?begin@QListData@@QEBAPEAPEAXXZ
?at@QListData@@QEBAPEAPEAXH@Z
?size@QListData@@QEBAHXZ
?dispose@QListData@@SAXPEAUData@1@@Z
?dispose@QListData@@QEAAXXZ
?detach_grow@QListData@@QEAAPEAUData@1@PEAHH@Z
?detach@QListData@@QEAAPEAUData@1@H@Z
?fromAscii_helper@QString@@CAPEAU?$QTypedArrayData@G@@PEBDH@Z
??8QString@@QEBA_NPEBD@Z
??0QString@@QEAA@PEBD@Z
?qBadAlloc@@YAXXZ
??0QMessageLogger@@QEAA@PEBDH0@Z
?debug@QMessageLogger@@QEBA?AVQDebug@@XZ
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
??0QChar@@QEAA@H@Z
?allocate@QArrayData@@SAPEAU1@_K00V?$QFlags@W4AllocationOption@QArrayData@@@@@Z
?deallocate@QArrayData@@SAXPEAU1@_K1@Z
?sharedNull@QArrayData@@SAPEAU1@XZ
??0QByteArray@@QEAA@AEBV0@@Z
??4QByteArray@@QEAAAEAV0@AEBV0@@Z
??0QString@@QEAA@AEBV0@@Z
??1QString@@QEAA@XZ
?indexOf@QString@@QEBAHAEBV1@HW4CaseSensitivity@Qt@@@Z
?toLower@QString@@QEGBA?AV1@XZ
?split@QString@@QEBA?AVQStringList@@VQChar@@V?$QFlags@W4SplitBehaviorFlags@Qt@@@@W4CaseSensitivity@Qt@@@Z
?append@QListData@@QEAAPEAPEAXXZ

kernel32

IsProcessorFeaturePresent
GetCurrentProcessId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter

vcruntime140

__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
memcpy
__current_exception
__current_exception_context
__C_specific_handler
__std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
terminate

api-ms-win-crt-heap-l1-1-0

free

Exports

Exports

??0UException@@QEAA@AEBV0@@Z
??0UException@@QEAA@AEBVQString@@@Z
??0UGlobalHotkeys@@QEAA@PEAVQWidget@@@Z
??0UKeySequence@@QEAA@AEBVQString@@PEAVQObject@@@Z
??0UKeySequence@@QEAA@PEAVQObject@@@Z
??1UException@@UEAA@XZ
??1UGlobalHotkeys@@UEAA@XZ
??1UKeySequence@@UEAA@XZ
??4UException@@QEAAAEAV0@AEBV0@@Z
??AUKeySequence@@QEBAH_K@Z
??_7UException@@6B@
??_7UGlobalHotkeys@@6BQObject@@@
??_7UGlobalHotkeys@@6BQPaintDevice@@@
??_7UKeySequence@@6B@
??_FUGlobalHotkeys@@QEAAXXZ
??_FUKeySequence@@QEAAXXZ
?AddKey@UKeySequence@@QEAAXAEBVQString@@@Z
?AddKey@UKeySequence@@QEAAXH@Z
?AddKey@UKeySequence@@QEAAXPEBVQKeyEvent@@@Z
?AddModifiers@UKeySequence@@QEAAXV?$QFlags@W4KeyboardModifier@Qt@@@@@Z
?FromString@UKeySequence@@QEAAXAEBVQString@@@Z
?GetModifiers@UKeySequence@@QEBA?AV?$QVector@H@@XZ
?GetSimpleKeys@UKeySequence@@QEBA?AV?$QVector@H@@XZ
?Size@UKeySequence@@QEBA_KXZ
?ToString@UKeySequence@@QEAA?AVQString@@XZ
?activated@UGlobalHotkeys@@QEAAX_K@Z
?metaObject@UGlobalHotkeys@@UEBAPEBUQMetaObject@@XZ
?metaObject@UKeySequence@@UEBAPEBUQMetaObject@@XZ
?nativeEvent@UGlobalHotkeys@@MEAA_NAEBVQByteArray@@PEAXPEAJ@Z
?qt_metacall@UGlobalHotkeys@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@UKeySequence@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@UGlobalHotkeys@@UEAAPEAXPEBD@Z
?qt_metacast@UKeySequence@@UEAAPEAXPEBD@Z
?qt_static_metacall@UGlobalHotkeys@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?qt_static_metacall@UKeySequence@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?registerHotkey@UGlobalHotkeys@@QEAAXAEBVQString@@_K@Z
?registerHotkey@UGlobalHotkeys@@QEAAXAEBVUKeySequence@@_K@Z
?staticMetaObject@UGlobalHotkeys@@2UQMetaObject@@B
?staticMetaObject@UKeySequence@@2UQMetaObject@@B
?tr@UGlobalHotkeys@@SA?AVQString@@PEBD0H@Z
?tr@UKeySequence@@SA?AVQString@@PEBD0H@Z
?trUtf8@UGlobalHotkeys@@SA?AVQString@@PEBD0H@Z
?trUtf8@UKeySequence@@SA?AVQString@@PEBD0H@Z
?unregisterAllHotkeys@UGlobalHotkeys@@QEAAXXZ
?unregisterHotkey@UGlobalHotkeys@@QEAAX_K@Z
?what@UException@@UEBAPEBDXZ
?winEvent@UGlobalHotkeys@@IEAA_NPEAUtagMSG@@@Z

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

206446bf6756ce008281efb8c8925dbb

Headers

DLL Characteristics

File Characteristics

Imports

user32

qt5widgets

qt5gui

qt5core

kernel32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 1024B - Virtual size: 808B

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 224B

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 1024B - Virtual size: 808B

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 224B