Static task
static1
Behavioral task
behavioral1
Sample
QTester104.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
QTester104.exe
Resource
win10v2004-20231023-en
General
-
Target
QTester104.exe
-
Size
185KB
-
MD5
3ee77d3b40c34d9b9c53aeb74b35cbd0
-
SHA1
cc5509dda001e0b07e07f4c9775bb864765b19df
-
SHA256
e45e4fe408ba6c170f372112a745bc9c2b4471d26adafd7c9a932b4cf8bb388f
-
SHA512
163402fd82801a2a46baf5a4baa7330bd7f9d44c7f7e9f8046b89f548a8c9d6a5e4c044bed8d074683f0f314cf279cf5dacdb119f402c8789965af3e0aa39310
-
SSDEEP
3072:6Vh2hZarAnPgAh2q8okyjei4EIOT68DeaecHEvzg5jDRwjgJqnxl5:ywacPa/yjCO8ck7g5jDRwcJqxl5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource QTester104.exe
Files
-
QTester104.exe.exe windows:4 windows x86
5f365b07add481ade6956ec0c1bd4885
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
qt5core
_ZN10QArrayData10deallocateEPS_jj
_ZN10QArrayData11shared_nullE
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject14normalizedTypeEPKc
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QTextStreamC1EP7QString6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamD1Ev
_ZN11QTextStreamlsEi
_ZN16QCoreApplication9translateEPKcS1_S1_i
_ZN6QTimer4stopEv
_ZN6QTimer5startEi
_ZN6QTimer5startEv
_ZN6QTimerC1EP7QObject
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QObject11qt_metacastEPKc
_ZN7QObject12moveToThreadEP7QThread
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN7QRegExpC1ERK7QStringN2Qt15CaseSensitivityENS_13PatternSyntaxE
_ZN7QRegExpD1Ev
_ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString16fromAscii_helperEPKci
_ZN7QString6appendERKS_
_ZN7QStringaSERKS_
_ZN7QThread4quitEv
_ZN7QThread4waitEm
_ZN7QThread5startENS_8PriorityE
_ZN7QThread9terminateEv
_ZN7QThreadC1EP7QObject
_ZN7QThreadD1Ev
_ZN8QVariantC1EPKc
_ZN8QVariantC1ERK7QString
_ZN8QVariantC1Ei
_ZN8QVariantD1Ev
_ZN9QDateTime15currentDateTimeEv
_ZN9QDateTimeD1Ev
_ZN9QIODevice4readEPcx
_ZN9QIODevice5writeEPKcx
_ZN9QListData11detach_growEPii
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData7disposeEPNS_4DataE
_ZN9QMetaType22registerNormalizedTypeERK10QByteArrayPFvPvEPFS3_PKvES5_PFS3_S3_S7_Ei6QFlagsINS_8TypeFlagEEPK11QMetaObject
_ZN9QMetaType25registerNormalizedTypedefERK10QByteArrayi
_ZN9QSettingsC1ERK7QStringNS_6FormatEP7QObject
_ZN9QSettingsD1Ev
_ZN9QtPrivate16QStringList_joinEPK11QStringListPK5QChari
_ZNK11QMetaObject2trEPKcS1_i
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK5QDate3dayEv
_ZNK5QDate4yearEv
_ZNK5QDate5monthEv
_ZNK5QTime4hourEv
_ZNK5QTime4msecEv
_ZNK5QTime6minuteEv
_ZNK5QTime6secondEv
_ZNK7QObject10objectNameEv
_ZNK7QString4leftEi
_ZNK7QString5toIntEPbi
_ZNK7QString6toUtf8Ev
_ZNK7QString7indexOfE5QChariN2Qt15CaseSensitivityE
_ZNK7QString7toFloatEPb
_ZNK7QString7trimmedEv
_ZNK7QThread9isRunningEv
_ZNK8QVariant5toIntEPb
_ZNK8QVariant8toStringEv
_ZNK9QDateTime4dateEv
_ZNK9QDateTime4timeEv
_ZNK9QDateTime8toStringERK7QString
_ZNK9QSettings5valueERK7QStringRK8QVariant
qt5gui
_ZN10QClipboard7setTextERK7QStringNS_4ModeE
_ZN13QIntValidatorC1EiiP7QObject
_ZN15QGuiApplication9clipboardEv
_ZN16QRegExpValidatorC1ERK7QRegExpP7QObject
_ZN5QFont12setPointSizeEi
_ZN5QFont8setStyleENS_5StyleE
_ZN5QFont9setFamilyERK7QString
_ZN5QFontC1Ev
_ZN5QFontD1Ev
qt5network
_ZN10QTcpSocketC1EP7QObject
_ZN10QUdpSocket12readDatagramEPcxP12QHostAddressPt
_ZN10QUdpSocket13writeDatagramEPKcxRK12QHostAddresst
_ZN10QUdpSocketC1EP7QObject
_ZN12QHostAddressC1ERK7QString
_ZN12QHostAddressC1Ev
_ZN12QHostAddressD1Ev
_ZN12QHostAddressaSERK7QString
_ZN15QAbstractSocket4bindEt6QFlagsINS_8BindFlagEE
_ZNK10QUdpSocket19hasPendingDatagramsEv
_ZNK12QHostAddress8toStringEv
_ZNK12QHostAddresseqERKS_
_ZNK15QAbstractSocket11peerAddressEv
_ZNK15QAbstractSocket5stateEv
qt5widgets
_ZN10QStatusBarC1EP7QWidget
_ZN10QTableView12sortByColumnEi
_ZN10QTableView20resizeRowsToContentsEv
_ZN10QTableView23resizeColumnsToContentsEv
_ZN11QGridLayout10setSpacingEi
_ZN11QGridLayout9addWidgetEP7QWidgetiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayoutC1EP7QWidget
_ZN11QListWidget10insertItemEiRK7QString
_ZN11QListWidget5clearEv
_ZN11QListWidgetC1EP7QWidget
_ZN11QMainWindow10setMenuBarEP8QMenuBar
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow12setStatusBarEP10QStatusBar
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QPushButtonC1EP7QWidget
_ZN11QSizePolicy14setControlTypeENS_11ControlTypeE
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN12QTableWidget11setRowCountEi
_ZN12QTableWidget13clearContentsEv
_ZN12QTableWidget14setColumnCountEi
_ZN12QTableWidget17setSortingEnabledEb
_ZN12QTableWidget25setHorizontalHeaderLabelsERK11QStringList
_ZN12QTableWidget5clearEv
_ZN12QTableWidget7setItemEiiP16QTableWidgetItem
_ZN12QTableWidget9insertRowEi
_ZN12QTableWidget9sortItemsEiN2Qt9SortOrderE
_ZN12QTableWidgetC1EP7QWidget
_ZN15QAbstractButton10setCheckedEb
_ZN15QAbstractButton7setTextERK7QString
_ZN16QTableWidgetItem8setFlagsE6QFlagsIN2Qt8ItemFlagEE
_ZN16QTableWidgetItemC1ERK7QStringi
_ZN17QAbstractItemView14scrollToBottomEv
_ZN17QAbstractItemView16setSelectionModeENS_13SelectionModeE
_ZN19QAbstractScrollArea26setVerticalScrollBarPolicyEN2Qt15ScrollBarPolicyE
_ZN19QAbstractScrollArea28setHorizontalScrollBarPolicyEN2Qt15ScrollBarPolicyE
_ZN6QLabel7setTextERK7QString
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QLayout18setContentsMarginsEiiii
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setEnabledEb
_ZN7QWidget10setToolTipERK7QString
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPl
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11setGeometryERK5QRect
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13setSizePolicyE11QSizePolicy
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setMaximumSizeEii
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget4showEv
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget7setFontERK5QFont
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN8QMenuBarC1EP7QWidget
_ZN9QCheckBoxC1EP7QWidget
_ZN9QComboBox11insertItemsEiRK11QStringList
_ZN9QComboBox5clearEv
_ZN9QComboBoxC1EP7QWidget
_ZN9QLineEdit12setValidatorEPK10QValidator
_ZN9QLineEdit7setTextERK7QString
_ZN9QLineEditC1EP7QWidget
_ZN9QListView13setLayoutModeENS_10LayoutModeE
_ZN9QListView13setResizeModeENS_10ResizeModeE
_ZN9QSplitter14setOrientationEN2Qt11OrientationE
_ZN9QSplitter9addWidgetEP7QWidget
_ZN9QSplitterC1EP7QWidget
_ZNK11QListWidget4itemEi
_ZNK11QListWidget5countEv
_ZNK12QTableWidget4itemEii
_ZNK12QTableWidget8rowCountEv
_ZNK15QAbstractButton9isCheckedEv
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget10sizePolicyEv
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK9QComboBox11currentTextEv
_ZNK9QLineEdit4textEv
_ZThn8_NK7QWidget10redirectedEP6QPoint
_ZThn8_NK7QWidget11initPainterEP8QPainter
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget13sharedPainterEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
libgcc_s_dw2-1
_Unwind_Resume
__deregister_frame_info
__register_frame_info
__udivdi3
__umoddi3
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
atoi
calloc
exit
fprintf
fputc
free
fwrite
getenv
localtime
localeconv
malloc
memcpy
setlocale
signal
sprintf
strchr
strcmp
strerror
strftime
strlen
strncmp
strncpy
time
vfprintf
wcslen
shell32
CommandLineToArgvW
libstdc++-6
_ZNSdD2Ev
_ZNSo9_M_insertIdEERSoT_
_ZNSo9_M_insertImEERSoT_
_ZNSolsEi
_ZNSolsEs
_ZNSs12_S_constructEjcRKSaIcE
_ZNSs4_Rep10_M_destroyERKSaIcE
_ZNSs4_Rep10_M_disposeERKSaIcE
_ZNSs4_Rep9_S_createEjjRKSaIcE
_ZNSs6appendEPKcj
_ZNSs6appendERKSs
_ZNSs6assignEPKcj
_ZNSs6assignERKSs
_ZNSs7reserveEj
_ZNSsC1EPKcRKSaIcE
_ZNSsC1EPKcjRKSaIcE
_ZNSsC1ERKSs
_ZNSt15basic_stringbufIcSt11char_traitsIcESaIcEE7_M_syncEPcjj
_ZNSt18basic_stringstreamIcSt11char_traitsIcESaIcEED1Ev
_ZNSt6localeC1Ev
_ZNSt6localeD1Ev
_ZNSt8__detail15_List_node_base7_M_hookEPS0_
_ZNSt8__detail15_List_node_base9_M_unhookEv
_ZNSt8ios_baseC2Ev
_ZNSt8ios_baseD2Ev
_ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E
_ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_i
_ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base
_ZSt19__throw_logic_errorPKc
_ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_
_ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc
_ZTTSt18basic_stringstreamIcSt11char_traitsIcESaIcEE
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt15basic_stringbufIcSt11char_traitsIcESaIcEE
_ZTVSt18basic_stringstreamIcSt11char_traitsIcESaIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZdaPv
_ZdlPv
_Znaj
_Znwj
__cxa_begin_catch
__cxa_end_catch
__cxa_pure_virtual
__cxa_rethrow
__gxx_personality_v0
Sections
.text Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE