Static task
static1
Behavioral task
behavioral1
Sample
ProgramQServer.exe
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral2
Sample
ProgramQServer.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
General
-
Target
ProgramQServer.exe
-
Size
112KB
-
MD5
396d669a79f02a34f13f6d7107bddab7
-
SHA1
ec24d1fe843c4f03507a3126d65423a650691050
-
SHA256
767691b785c50447c51d549712afeefde26ebefd3a277a39ffc890881fc461c4
-
SHA512
ae99b12b7ca1022d66dfb31d24f1914f5a4eb04243b5ae5c6ecea7489089de161cb65078b2694681d14c758829c1ea7b7db1ec10a37f66083b4623b793177cfe
-
SSDEEP
1536:uIR+HG65cKjQlc96alIHnSITLE/3kB+RftVGkwoEPvXjp7Bwq80rAm:xYG69/9lIyIXK3kZkwoEPvXd7Bwq80N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ProgramQServer.exe
Files
-
ProgramQServer.exe.exe windows:4 windows x86
8fd582e22cc0e8d42372e9e9b073b18b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
kernel32
AddAtomA
CloseHandle
CreatePipe
CreateProcessW
CreateSemaphoreA
ExitProcess
FindAtomA
GetAtomNameA
GetLastError
GetStartupInfoW
GetVersionExW
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
msvcrt
_fdopen
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_filbuf
_get_osfhandle
_iob
_onexit
_open_osfhandle
_setmode
abort
atexit
fclose
free
malloc
memset
printf
puts
rand
signal
srand
strcmp
qtcore4
_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_Z5qFreePv
_Z8qWarningPKcz
_ZN10QByteArray11shared_nullE
_ZN10QByteArrayC1EPKc
_ZN10QTextCodec12codecForNameERK10QByteArray
_ZN11QDataStreamC1EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QDataStreamC1EP9QIODevice
_ZN11QDataStreamD1Ev
_ZN11QDataStreamlsEs
_ZN11QDataStreamrsERs
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QTextStream8setCodecEP10QTextCodec
_ZN11QTextStreamC1EP7QString6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamC1EP9QIODevice
_ZN11QTextStreamD1Ev
_ZN11QTextStreamlsEPKc
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEc
_ZN16QCoreApplication13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE
_ZN16QCoreApplication18applicationDirPathEv
_ZN16QCoreApplication4quitEv
_ZN16QCoreApplication9translateEPKcS1_S1_NS_8EncodingE
_ZN4QDir10setCurrentERK7QString
_ZN4QDirC1ERK7QString
_ZN4QDirC1ERK7QStringS2_6QFlagsINS_8SortFlagEES3_INS_6FilterEE
_ZN4QDirD1Ev
_ZN5QChar9fromAsciiEc
_ZN5QCharC1Ec
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFile5closeEv
_ZN5QFileC1ERK7QString
_ZN5QFileC1ERK7QStringP7QObject
_ZN5QFileD1Ev
_ZN5QTime11currentTimeEv
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QObject11qt_metacastEPKc
_ZN7QObject13connectNotifyEPKc
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN7QRegExp10setMinimalEb
_ZN7QRegExpC1ERK7QStringN2Qt15CaseSensitivityENS_13PatternSyntaxE
_ZN7QRegExpC1ERKS_
_ZN7QRegExpD1Ev
_ZN7QString10setUnicodeEPK5QChari
_ZN7QString11shared_nullE
_ZN7QString16codecForCStringsE
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4fillE5QChari
_ZN7QString4freeEPNS_4DataE
_ZN7QString4growEi
_ZN7QString6appendE5QChar
_ZN7QString6appendERKS_
_ZN7QString7reallocEi
_ZN7QString7replaceERK7QRegExpRKS_
_ZN7QString8fromUtf8EPKci
_ZN7QString9fromAsciiEPKci
_ZN7QStringC1E5QChar
_ZN7QStringaSERKS_
_ZN8QMapData10createDataEv
_ZN8QMapData11node_createEPPNS_4NodeEi
_ZN8QMapData11shared_nullE
_ZN8QMapData16continueFreeDataEi
_ZN8QVariantC1ERK7QString
_ZN8QVariantD1Ev
_ZN9QFileInfoC1ERK7QString
_ZN9QFileInfoD1Ev
_ZN9QIODevice5writeEPKcx
_ZN9QIODevice7readAllEv
_ZN9QListData11shared_nullE
_ZN9QListData5eraseEPPv
_ZN9QListData6appendEv
_ZN9QListData6insertEi
_ZN9QListData6removeEi
_ZN9QListData7detach2Ev
_ZN9QListData7prependEv
_ZN9QtPrivate16QStringList_joinEPK11QStringListRK7QString
_ZNK4QDir12absolutePathEv
_ZNK4QDir6existsEv
_ZNK4QDir9entryListE6QFlagsINS_6FilterEES0_INS_8SortFlagEE
_ZNK5QChar16isLetterOrNumberEv
_ZNK5QChar7toLowerEv
_ZNK5QChar9directionEv
_ZNK5QFile8fileNameEv
_ZNK5QTime4msecEv
_ZNK5QTime6minuteEv
_ZNK5QTime6secondEv
_ZNK7QObject10objectNameEv
_ZNK7QObject6senderEv
_ZNK7QString10startsWithERKS_N2Qt15CaseSensitivityE
_ZNK7QString11toLocal8BitEv
_ZNK7QString3argERKS_iRK5QChar
_ZNK7QString3argExiiRK5QChar
_ZNK7QString5splitERK5QCharNS_13SplitBehaviorEN2Qt15CaseSensitivityE
_ZNK7QString5splitERK7QRegExpNS_13SplitBehaviorE
_ZNK7QString5toIntEPbi
_ZNK7QString5utf16Ev
_ZNK7QString6toUIntEPbi
_ZNK7QString7indexOfERKS_iN2Qt15CaseSensitivityE
_ZNK7QString7sectionERKS_ii6QFlagsINS_11SectionFlagEE
_ZNK7QString7toLowerEv
_ZNK7QString7toUpperEv
_ZNK7QString7trimmedEv
_ZNK7QStringeqERK13QLatin1String
_ZNK7QStringeqERKS_
_ZNK7QStringltERKS_
_ZNK9QFileInfo8fileNameEv
_ZlsR11QDataStreamRK7QString
_ZrsR11QDataStreamR7QString
qtgui4
_ZN11QGridLayout10setSpacingEi
_ZN11QGridLayout18setVerticalSpacingEi
_ZN11QGridLayout20setHorizontalSpacingEi
_ZN11QGridLayout7addItemEP11QLayoutItemiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayout9addWidgetEP7QWidgetiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayoutC1EP7QWidget
_ZN11QPushButtonC1EP7QWidget
_ZN11QTextCursor12movePositionENS_13MoveOperationENS_8MoveModeEi
_ZN11QTextCursorD1Ev
_ZN12QApplication4execEv
_ZN12QApplication8setStyleEP6QStyle
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN13QTextDocument18setUndoRedoEnabledEb
_ZN15QAbstractButton7setIconERK5QIcon
_ZN15QAbstractButton7setTextERK7QString
_ZN15QPlastiqueStyleC1Ev
_ZN15QProgressDialog10setMaximumEi
_ZN15QProgressDialog10setMinimumEi
_ZN15QProgressDialog12setLabelTextERK7QString
_ZN15QProgressDialog15setCancelButtonEP11QPushButton
_ZN15QProgressDialog8setValueEi
_ZN15QProgressDialogC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN2Qt20convertFromPlainTextERK7QStringNS_14WhiteSpaceModeE
_ZN5QIconC1ERK7QString
_ZN5QIconC1Ev
_ZN5QIconD1Ev
_ZN6QColorC1EN2Qt11GlobalColorE
_ZN6QFrame13setFrameShapeENS_5ShapeE
_ZN6QFrame14setFrameShadowENS_6ShadowE
_ZN6QFrameC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QLabel10paintEventEP11QPaintEvent
_ZN6QLabel11changeEventEP6QEvent
_ZN6QLabel11qt_metacallEN11QMetaObject4CallEiPPv
_ZN6QLabel11qt_metacastEPKc
_ZN6QLabel12focusInEventEP11QFocusEvent
_ZN6QLabel13focusOutEventEP11QFocusEvent
_ZN6QLabel13keyPressEventEP9QKeyEvent
_ZN6QLabel14mouseMoveEventEP11QMouseEvent
_ZN6QLabel15mousePressEventEP11QMouseEvent
_ZN6QLabel16contextMenuEventEP17QContextMenuEvent
_ZN6QLabel16staticMetaObjectE
_ZN6QLabel17mouseReleaseEventEP11QMouseEvent
_ZN6QLabel18focusNextPrevChildEb
_ZN6QLabel5eventEP6QEvent
_ZN6QLabel7setTextERK7QString
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QLabelC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QLabelD2Ev
_ZN7QCursorC1EN2Qt11CursorShapeE
_ZN7QCursorD1Ev
_ZN7QDialog10closeEventEP11QCloseEvent
_ZN7QDialog10setVisibleEb
_ZN7QDialog11eventFilterEP7QObjectP6QEvent
_ZN7QDialog11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QDialog11qt_metacastEPKc
_ZN7QDialog11resizeEventEP12QResizeEvent
_ZN7QDialog13keyPressEventEP9QKeyEvent
_ZN7QDialog16contextMenuEventEP17QContextMenuEvent
_ZN7QDialog16staticMetaObjectE
_ZN7QDialog18setSizeGripEnabledEb
_ZN7QDialog4doneEi
_ZN7QDialog4execEv
_ZN7QDialog6acceptEv
_ZN7QDialog6rejectEv
_ZN7QDialog8setModalEb
_ZN7QDialog9showEventEP10QShowEvent
_ZN7QDialogC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QDialogC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QDialogD1Ev
_ZN7QDialogD2Ev
_ZN7QLayout18setContentsMarginsEiiii
_ZN7QLayout9setMarginEi
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10fontChangeERK5QFont
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setEnabledEb
_ZN7QWidget10setToolTipERK7QString
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11styleChangeER6QStyle
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13enabledChangeEb
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13paletteChangeERK8QPalette
_ZN7QWidget13setSizePolicyE11QSizePolicy
_ZN7QWidget13setWindowIconERK5QIcon
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14languageChangeEv
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setFocusPolicyEN2Qt11FocusPolicyE
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget18setLayoutDirectionEN2Qt15LayoutDirectionE
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget22windowActivationChangeEb
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget8setFocusEN2Qt11FocusReasonE
_ZN7QWidget8winEventEP6tagMSGPl
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9setCursorERK7QCursor
_ZN7QWidget9showEventEP10QShowEvent
_ZN9QComboBox10insertItemEiRK5QIconRK7QStringRK8QVariant
_ZN9QComboBox11insertItemsEiRK11QStringList
_ZN9QComboBox11setEditableEb
_ZN9QComboBox13clearEditTextEv
_ZN9QComboBoxC1EP7QWidget
_ZN9QGroupBox8setTitleERK7QString
_ZN9QGroupBoxC1EP7QWidget
_ZN9QTextEdit10insertHtmlERK7QString
_ZN9QTextEdit11setReadOnlyEb
_ZN9QTextEdit12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE
_ZN9QTextEdit12setTextColorERK6QColor
_ZN9QTextEdit13setTextCursorERK11QTextCursor
_ZN9QTextEdit15insertPlainTextERK7QString
_ZN9QTextEdit19ensureCursorVisibleEv
_ZN9QTextEditC1EP7QWidget
_ZNK6QLabel14heightForWidthEi
_ZNK6QLabel15minimumSizeHintEv
_ZNK6QLabel8sizeHintEv
_ZNK7QDialog15minimumSizeHintEv
_ZNK7QDialog8sizeHintEv
_ZNK7QWidget10sizePolicyEv
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15layoutDirectionEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget5getDCEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget9releaseDCEP5HDC__
_ZNK9QComboBox11currentTextEv
_ZNK9QComboBox5countEv
_ZNK9QComboBox8findDataERK8QVarianti6QFlagsIN2Qt9MatchFlagEE
_ZNK9QTextEdit10textCursorEv
_ZNK9QTextEdit8documentEv
_ZTV11QLayoutItem
_ZTV11QSpacerItem
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget5getDCEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
_ZThn8_NK7QWidget9releaseDCEP5HDC__
qtnetwork4
_ZN10QTcpServer5closeEv
_ZN10QTcpServer6listenERK12QHostAddresst
_ZN10QTcpServerC1EP7QObject
_ZN12QHostAddressC1ENS_14SpecialAddressE
_ZN12QHostAddressD1Ev
_ZN15QAbstractSocket18disconnectFromHostEv
_ZNK10QTcpServer11errorStringEv
qtxml4
_ZN11QDomElement10setTagNameERK7QString
_ZN11QDomElement12setAttributeERK7QStringS2_
_ZN12QDomDocument10setContentEP15QXmlInputSourceP10QXmlReaderP7QStringPiS6_
_ZN12QDomDocument10setContentEP9QIODeviceP7QStringPiS4_
_ZN12QDomDocument13createElementERK7QString
_ZN12QDomDocument14createTextNodeERK7QString
_ZN12QDomDocumentC1ERK7QString
_ZN12QDomDocumentC1Ev
_ZN12QDomDocumentD1Ev
_ZN12QDomNodeListD1Ev
_ZN15QXmlInputSourceC1EP9QIODevice
_ZN15QXmlInputSourceD1Ev
_ZN16QDomNamedNodeMapD1Ev
_ZN16QXmlSimpleReader10setFeatureERK7QStringb
_ZN16QXmlSimpleReaderC1Ev
_ZN16QXmlSimpleReaderD1Ev
_ZN8QDomNode11appendChildERKS_
_ZN8QDomNodeC1ERKS_
_ZN8QDomNodeC1Ev
_ZN8QDomNodeD1Ev
_ZN8QDomNodeD2Ev
_ZN8QDomNodeaSERKS_
_ZNK11QDomElement12hasAttributeERK7QString
_ZNK11QDomElement17elementsByTagNameERK7QString
_ZNK11QDomElement9attributeERK7QStringS2_
_ZNK12QDomDocument15documentElementEv
_ZNK12QDomDocument8toStringEi
_ZNK12QDomNodeList4itemEi
_ZNK12QDomNodeList6lengthEv
_ZNK16QDomNamedNodeMap4itemEi
_ZNK16QDomNamedNodeMap6lengthEv
_ZNK8QDomNode10attributesEv
_ZNK8QDomNode10firstChildEv
_ZNK8QDomNode10parentNodeEv
_ZNK8QDomNode11nextSiblingEv
_ZNK8QDomNode13hasChildNodesEv
_ZNK8QDomNode4saveER11QTextStreami
_ZNK8QDomNode6isNullEv
_ZNK8QDomNode6isTextEv
_ZNK8QDomNode6toTextEv
_ZNK8QDomNode8nodeNameEv
_ZNK8QDomNode9namedItemERK7QString
_ZNK8QDomNode9nodeValueEv
_ZNK8QDomNode9toElementEv
_ZNK8QDomNodeeqERKS_
Sections
.text Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE