320f77f9c85d606a14c8a5e2fef5c6e11588a9fd80e075042544c1ac73003611

Sharing

Copy URL

Twitter E-mail

General

Target

320f77f9c85d606a14c8a5e2fef5c6e11588a9fd80e075042544c1ac73003611
Size

304KB
MD5

3ed5044e681e9267907db81ecec44a6a
SHA1

9b834f81543bbfc79577d9941fd08451a0477819
SHA256

320f77f9c85d606a14c8a5e2fef5c6e11588a9fd80e075042544c1ac73003611
SHA512

fd3836fbdeea3cdb29bd444541d3f39b90a2c8f6e5e563bac8ccab063ae1111f8632220ef0d5f93d6868d6fab6d5f068c6c5f12c917cea98a4f9a9561aace7e3
SSDEEP

6144:+m84TQjAXxoCrO1WYgeWYg955/155/b74RUOmuMN2UScJWoQYP3/Y2:xFTQT0O1WYgeWYg955/155/H4RUZ2Uwc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
320f77f9c85d606a14c8a5e2fef5c6e11588a9fd80e075042544c1ac73003611

Files

320f77f9c85d606a14c8a5e2fef5c6e11588a9fd80e075042544c1ac73003611
.exe windows x64

a5a297d516046deac96e564e4ddfb087

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
OpenProcess
VirtualAllocEx
WriteProcessMemory
FreeLibrary
GetProcAddress
CreateToolhelp32Snapshot
GetProcessHeap
Thread32Next
GetLastError
SetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
WriteConsoleW
CreateFileW
SetFilePointerEx
HeapFree
HeapAlloc
Thread32First
CloseHandle
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapSize
HeapReAlloc
GetFileType
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetCommandLineW
GetCommandLineA
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwindEx
RaiseException
RtlPcToFileHeader
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW
GetCPInfo
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW

user32

GetAsyncKeyState
GetForegroundWindow
GetWindowThreadProcessId

qt5network

?downloadProgress@QNetworkReply@@QEAAX_J0@Z
?finished@QNetworkReply@@QEAAXXZ
?header@QNetworkReply@@QEBA?AVQVariant@@W4KnownHeaders@QNetworkRequest@@@Z
?error@QNetworkReply@@QEBA?AW4NetworkError@1@XZ
?post@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@AEBVQByteArray@@@Z
??1QNetworkAccessManager@@UEAA@XZ
??0QNetworkAccessManager@@QEAA@PEAVQObject@@@Z
?setHeader@QNetworkRequest@@QEAAXW4KnownHeaders@1@AEBVQVariant@@@Z
??1QNetworkRequest@@QEAA@XZ
??0QNetworkRequest@@QEAA@AEBVQUrl@@@Z
?staticMetaObject@QNetworkReply@@2UQMetaObject@@B

qt5core

?timeout@QTimer@@QEAAXUQPrivateSignal@1@@Z
?start@QTimer@@QEAAXXZ
?setInterval@QTimer@@QEAAXH@Z
??1QTimer@@UEAA@XZ
??0QTimer@@QEAA@PEAVQObject@@@Z
?elapsed@QElapsedTimer@@QEBA_JXZ
?start@QElapsedTimer@@QEAAXXZ
?contains@QJsonObject@@QEBA_NAEBVQString@@@Z
??AQJsonObject@@QEAA?AVQJsonValueRef@@AEBVQString@@@Z
??1QJsonObject@@QEAA@XZ
?isNull@QJsonDocument@@QEBA_NXZ
?object@QJsonDocument@@QEBA?AVQJsonObject@@XZ
?isObject@QJsonDocument@@QEBA_NXZ
?fromJson@QJsonDocument@@SA?AV1@AEBVQByteArray@@PEAUQJsonParseError@@@Z
??1QJsonDocument@@QEAA@XZ
?toValue@QJsonValueRef@@AEBA?AVQJsonValue@@XZ
?toString@QJsonValueRef@@QEBA?AVQString@@XZ
?type@QJsonValue@@QEBA?AW4Type@1@XZ
??1QJsonValue@@QEAA@XZ
??6QDebug@@QEAAAEAV0@PEBD@Z
??6QDebug@@QEAAAEAV0@N@Z
??1QDebug@@QEAA@XZ
?staticMetaObject@QTimer@@2UQMetaObject@@B
?toLongLong@QVariant@@QEBA_JPEA_N@Z
??0QVariant@@QEAA@PEBD@Z
??1QVariant@@QEAA@XZ
??1QUrl@@QEAA@XZ
??0QUrl@@QEAA@AEBVQString@@W4ParsingMode@0@@Z
?exec@QCoreApplication@@SAHXZ
??1QCoreApplication@@UEAA@XZ
??0QCoreApplication@@QEAA@AEAHPEAPEADH@Z
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PEBV1@PEAPEAX01PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEBHPEBU3@@Z
?deleteLater@QObject@@QEAAXXZ
??1Connection@QMetaObject@@QEAA@XZ
?fromAscii_helper@QString@@CAPEAU?$QTypedArrayData@G@@PEBDH@Z
?toLocal8Bit@QString@@QEGBA?AVQByteArray@@XZ
??1QString@@QEAA@XZ
?end@QByteArray@@QEAAPEADXZ
?begin@QByteArray@@QEAAPEADXZ
?fromBase64@QByteArray@@SA?AV1@AEBV1@@Z
?data@QByteArray@@QEAAPEADXZ
??1QByteArray@@QEAA@XZ
??0QByteArray@@QEAA@XZ
?debug@QMessageLogger@@QEBA?AVQDebug@@XZ
??0QMessageLogger@@QEAA@PEBDH0@Z
?readAll@QIODevice@@QEAA?AVQByteArray@@XZ

Sections

.text
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5a297d516046deac96e564e4ddfb087

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

qt5network

qt5core

Sections

.text Size: 195KB - Virtual size: 194KB

.rdata Size: 83KB - Virtual size: 83KB

.data Size: 11KB - Virtual size: 21KB

.pdata Size: 9KB - Virtual size: 8KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 1024B - Virtual size: 736B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 195KB - Virtual size: 194KB

.rdata
Size: 83KB - Virtual size: 83KB

.data
Size: 11KB - Virtual size: 21KB

.pdata
Size: 9KB - Virtual size: 8KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 1024B - Virtual size: 736B

.reloc
Size: 3KB - Virtual size: 2KB