General

  • Target

    Dark Spy.rar

  • Size

    40.4MB

  • MD5

    c91673cc06dda4d17494ef033f54c67e

  • SHA1

    ce4dfbfb8ee9a4647f60af78556eb98f16c93620

  • SHA256

    826ee71a855c8f975679dd9d8475c4a9ec80a9c05d56d4fae908d80de2e89efd

  • SHA512

    fda3324ec7adb33139fadd20d47faaccdfc035be7ca914cc1902ce3dac3ae713dfc6117a1bbfa67682aac9adca619c08c1ffea16480e0ad30dfb103d8a94072b

  • SSDEEP

    786432:9e9bOV5rZKKw1NDPRNc5kcsB9+AL7JrHsmY1OVJaMTR6Ph8ar7HI/NbGK0BpAggJ:9wyr8ztXc/sLRH5V0IRuD7I/kK0Byz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • Dark Spy.rar
    .rar

    Password: Ze1ng

  • Dark Spy/Dark Spy.exe
    .exe windows:5 windows x86 arch:x86

    Password: Ze1ng


    Headers

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/iconengines/qsvgicon.dll
  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qgif.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    5fd27c15059ed7d25ce61b5068776b9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qicns.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    e9072e2a0e32154032ac95db134bc344


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qico.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    b127d2b5eb2d64741e8cf3a684f53083


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qjpeg.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    0ee7f60098b60d828daa90a658ce1e89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qsvg.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    99e575340214e1344b829f73fc103448


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qtga.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    5d2534ece75e4b6d48b90a3a5ab461ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qtiff.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    2388c0b64a24970ee09483c444670343


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qwbmp.dll
    .dll windows:6 windows x86 arch:x86

    cb222c05c5fe195a9fc1087938b86d12


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qwebp.dll
    .dll windows:6 windows x86 arch:x86

    92b10182dd96972184b6f43d0e7f28dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qminimal.dll
    .dll windows:6 windows x86 arch:x86

    74aa4d54a4cfe559c9bdbd3b3a5f40d1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qoffscreen.dll
    .dll windows:6 windows x86 arch:x86

    5c6391e49087f7f6893ad18471bd87ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qwebgl.dll
    .dll windows:6 windows x86 arch:x86

    ab5da60f88dfab52361d150fb0d5b1a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    29ed2e73839186c2a3b5a58cddc0eb48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/platformthemes/qxdgdesktopportal.dll
    .dll windows:6 windows x86 arch:x86

    b14e90cd5ac3b42e54f7034e1c6bf066


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/styles/qwindowsvistastyle.dll
    .dll windows:6 windows x86 arch:x86

    0404caa26e442821bc38f28b50ba0493


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_ar.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_bg.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_ca.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_cs.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_da.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_de.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_en.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_es.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_fi.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_fr.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_gd.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_he.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_hu.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_it.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_ja.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_ko.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_lv.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_pl.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_ru.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_sk.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_tr.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_uk.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_zh_TW.qm
  • Dark Spy/Engine/Qt5/QtCore.pyd
  • Dark Spy/Engine/Qt5/QtGui.pyd
    .dll windows:6 windows x86 arch:x86

    626ae68e2c92aadb095ec8822c4e1a17


    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/QtWidgets.pyd
    .dll windows:6 windows x86 arch:x86

    769729ed68c7e04862238ce3222deeac


    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/sip.cp36-win32.pyd
  • Dark Spy/Engine/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/Qt5Widgets.dll
  • Dark Spy/Engine/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Dark Spy/Engine/bin/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/bin/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/bin/msvcp120.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/bin/msvcr120.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/bin/opengl32sw.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/bin/ssleay32.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/concrt140.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • Dark Spy/Engine/msvcp120.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/msvcp140.dll
  • Dark Spy/Engine/msvcp140_1.dll
  • Dark Spy/Engine/msvcr120.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/opengl32sw.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/ssleay32.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/turbojpeg.dll
    .dll windows:5 windows x64 arch:x64

    e6765faaa5e8df4b63f1362c7456d66b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/ucrtbase.dll
    .dll windows:10 windows x86 arch:x86

    d39a7129e74d69ddb0535724bd6037b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/GameOverlay.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/config/WindowsEngine.ini
  • Dark Spy/config/cfg.ini
  • Dark Spy/info.txt