Static task
static1
Behavioral task
behavioral1
Sample
b00bd000b2bcb77f12a5352a20026df6c4b8e3f16ce5835f2f3498acf5821e6b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b00bd000b2bcb77f12a5352a20026df6c4b8e3f16ce5835f2f3498acf5821e6b.exe
Resource
win10v2004-20230915-en
General
-
Target
b00bd000b2bcb77f12a5352a20026df6c4b8e3f16ce5835f2f3498acf5821e6b
-
Size
503KB
-
MD5
b5adf09c3bdecb07e1f9a85d88d018a6
-
SHA1
e83bae2712585c3efcaa966b061955b7bb6f1adc
-
SHA256
b00bd000b2bcb77f12a5352a20026df6c4b8e3f16ce5835f2f3498acf5821e6b
-
SHA512
2fe12b70090c1a2c8258e770d1db728bea2cfdd58e69369cde272cdcb6cbc8759c5d20b8a2f3d7560ece700ebbc4841b8cf2f8f94ce7018d7703eed6c2648ab7
-
SSDEEP
6144:uUwvlqJJfrlx1aS5WcTGRkcwjYsDc4VAOUmvQoR8+UMvU:QlqLr1p5WoGeYKc+nvQ28+9vU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b00bd000b2bcb77f12a5352a20026df6c4b8e3f16ce5835f2f3498acf5821e6b
Files
-
b00bd000b2bcb77f12a5352a20026df6c4b8e3f16ce5835f2f3498acf5821e6b.exe windows:6 windows x86
abc02913255bf85553f95928da381f14
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
xsyslog
?xSyslogSetProcName@@YAXPB_W@Z
?xSyslog@@YAPAVCxSyslog@xcom@@XZ
uicomm
?metaObject@CxUesAppliction@@UBEPBUQMetaObject@@XZ
?qt_metacast@CxUesAppliction@@UAEPAXPBD@Z
?qt_metacall@CxUesAppliction@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?onIssue@CxUesAppliction@@MAEXABV?$CxStringBase@DUStrAlloc@xcom@@@xcom@@ABVCxByteArray@3@@Z
?onCallMethod@CxUesAppliction@@MAEHABV?$CxStringBase@DUStrAlloc@xcom@@@xcom@@ABVCxByteArray@3@AAV43@AAV23@@Z
?onBroken@CxUesAppliction@@MAEXXZ
??1CxUesAppliction@@UAE@XZ
??0CxUesAppliction@@QAE@AAHPAPAD@Z
qt5widgets
?compressEvent@QApplication@@MAE_NPAVQEvent@@PAVQObject@@PAVQPostEventList@@@Z
?event@QApplication@@MAE_NPAVQEvent@@@Z
?notify@QApplication@@UAE_NPAVQObject@@PAVQEvent@@@Z
qt5gui
?applicationFontFamilies@QFontDatabase@@SA?AVQStringList@@H@Z
?setHighDpiScaleFactorRoundingPolicy@QGuiApplication@@SAXW4HighDpiScaleFactorRoundingPolicy@Qt@@@Z
?setQuitOnLastWindowClosed@QGuiApplication@@SAX_N@Z
?addApplicationFont@QFontDatabase@@SAHABVQString@@@Z
qt5core
??0QMessageLogger@@QAE@PBDH0@Z
?critical@QMessageLogger@@QBE?AVQDebug@@XZ
?qInstallMessageHandler@@YAP6AXW4QtMsgType@@ABVQMessageLogContext@@ABVQString@@@ZP6AX012@Z@Z
??1QByteArray@@QAE@XZ
??0QString@@QAE@XZ
?shared_null@QListData@@2UData@1@B
?translate@QTranslator@@UBE?AVQString@@PBD00H@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?qt_metacast@QTranslator@@UAEPAXPBD@Z
?qt_metacall@QTranslator@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?metaObject@QTranslator@@UBEPBUQMetaObject@@XZ
?isEmpty@QTranslator@@UBE_NXZ
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?value@QSettings@@QBE?AVQVariant@@ABVQString@@ABV2@@Z
?allKeys@QSettings@@QBE?AVQStringList@@XZ
?beginGroup@QSettings@@QAEXABVQString@@@Z
??1QSettings@@UAE@XZ
??0QSettings@@QAE@ABVQString@@W4Format@0@PAVQObject@@@Z
?setCurrent@QDir@@SA_NABVQString@@@Z
?entryInfoList@QDir@@QBE?AV?$QList@VQFileInfo@@@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
?setNameFilters@QDir@@QAEXABVQStringList@@@Z
??1QDir@@QAE@XZ
??0QDir@@QAE@ABVQString@@@Z
?isFile@QFileInfo@@QBE_NXZ
?absolutePath@QFileInfo@@QBE?AVQString@@XZ
?fileName@QFileInfo@@QBE?AVQString@@XZ
?absoluteFilePath@QFileInfo@@QBE?AVQString@@XZ
??1QFileInfo@@QAE@XZ
??0QFileInfo@@QAE@ABV0@@Z
??6QDebug@@QAEAAV0@ABVQString@@@Z
??6QDebug@@QAEAAV0@PBD@Z
??1QDebug@@QAE@XZ
?load@QTranslator@@QAE_NABVQString@@000@Z
??1QTranslator@@UAE@XZ
??0QTranslator@@QAE@PAVQObject@@@Z
?setCodecForLocale@QTextCodec@@SAXPAV1@@Z
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
?codecForName@QTextCodec@@SAPAV1@PBD@Z
?toString@QVariant@@QBE?AVQString@@XZ
??1QVariant@@QAE@XZ
??0QVariant@@QAE@XZ
?installTranslator@QCoreApplication@@SA_NPAVQTranslator@@@Z
??0QString@@QAE@ABV0@@Z
?setAttribute@QCoreApplication@@SAXW4ApplicationAttribute@Qt@@_N@Z
?registerNormalizedType@QMetaType@@SAHABVQByteArray@@P6AXPAX@ZP6APAX1PBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PBUQMetaObject@@@Z
?end@QListData@@QBEPAPAXXZ
?begin@QListData@@QBEPAPAXXZ
?at@QListData@@QBEPAPAXH@Z
?size@QListData@@QBEHXZ
?append@QListData@@QAEPAPAXXZ
?dispose@QListData@@SAXPAUData@1@@Z
?dispose@QListData@@QAEXXZ
?realloc@QListData@@QAEXH@Z
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?detach@QListData@@QAEPAUData@1@H@Z
?normalizedType@QMetaObject@@SA?AVQByteArray@@PBD@Z
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z
?toStdString@QString@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0QString@@QAE@PBD@Z
?fromUtf8@QString@@SA?AV1@PBDH@Z
??YQString@@QAEAAV0@ABV0@@Z
?append@QString@@QAEAAV1@ABV1@@Z
??1QString@@QAE@XZ
shlwapi
PathRemoveExtensionW
PathFileExistsW
dbghelp
MiniDumpWriteDump
kernel32
SetLastError
SwitchToThread
DecodePointer
WriteConsoleW
HeapReAlloc
HeapSize
GetStringTypeW
SetStdHandle
FindNextFileW
FindFirstFileExW
FindClose
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
SetFilePointerEx
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetFileType
GetCommandLineW
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RtlUnwind
RaiseException
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
TerminateProcess
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
LoadLibraryW
VirtualProtect
GetLocalTime
SuspendThread
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
SetUnhandledExceptionFilter
CloseHandle
GetFileAttributesW
CreateFileW
CreateDirectoryW
FormatMessageW
LocalFree
LocalAlloc
LoadLibraryExW
GetProcAddress
GetModuleFileNameW
GetProcessHeap
HeapFree
HeapAlloc
GetCommandLineA
GetLastError
Sections
.text Size: 230KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ