8d3edb39b97c11fef10beb14528f65e3dff221fcf5e5ee86d9bf68384d316b78

Sharing

Copy URL Twitter E-mail

General

Target

8d3edb39b97c11fef10beb14528f65e3dff221fcf5e5ee86d9bf68384d316b78
Size

13.8MB
MD5

655be541e7c65aee757f4cda7f24fafc
SHA1

fc02890dbc341a89402b47c31539e9eb6e9a50cb
SHA256

8d3edb39b97c11fef10beb14528f65e3dff221fcf5e5ee86d9bf68384d316b78
SHA512

1ff166b9d0fee4ec907505173a466fc1b384950a989f8b81574d24be61c25aafd24debcc153ecf27b843552488bd33417c892bf1682e1165c7b52a18d9f3f88c
SSDEEP

393216:wI7PkhQnjXYaV/IADDgjANpXKWkSiGkj0SjV8q/0A/rf:vjDXXAAtNpX+GcD8qcA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d3edb39b97c11fef10beb14528f65e3dff221fcf5e5ee86d9bf68384d316b78

Files

8d3edb39b97c11fef10beb14528f65e3dff221fcf5e5ee86d9bf68384d316b78
.exe windows:5 windows x86 arch:x86

794d5f7d56df0e11715733bd005b136c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterDeviceNotificationW

boschdata

getBoschMode

hid

HidD_GetSerialNumberString

qt5widgets

?viewportSizeHint@QTableView@@MBE?AVQSize@@XZ

qt5gui

?fromImage@QPixmap@@SA?AV1@$$QAVQImage@@V?$QFlags@W4ImageConversionFlag@Qt@@@@@Z

qt5sql

?addBindValue@QSqlQuery@@QAEXABVQVariant@@V?$QFlags@W4ParamTypeFlag@QSql@@@@@Z

qt5xml

?text@QDomElement@@QBE?AVQString@@XZ

qt5network

?waitForReadyRead@QAbstractSocket@@UAE_NH@Z

qt5core

?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ

msvcp140

?_Xout_of_range@std@@YAXPBD@Z

setupapi

SetupDiEnumDeviceInterfaces

kernel32

GetCommandLineW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

vcruntime140

__std_exception_destroy

api-ms-win-crt-runtime-l1-1-0

_exit

api-ms-win-crt-string-l1-1-0

tolower

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-stdio-l1-1-0

fopen

api-ms-win-crt-time-l1-1-0

_gmtime64

api-ms-win-crt-filesystem-l1-1-0

_stat64

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

_except1

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

shell32

CommandLineToArgvW

ws2_32

listen

wldap32

ord142

crypt32

CryptStringToBinaryW

advapi32

CryptGetHashParam

Exports

Exports

isblank

Sections

.text
Size: - Virtual size: 977KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 883KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.G{v
Size: - Virtual size: 9.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Wi4
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.;W_
Size: 13.8MB - Virtual size: 13.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

794d5f7d56df0e11715733bd005b136c

Headers

DLL Characteristics

File Characteristics

Imports

user32

boschdata

hid

qt5widgets

qt5gui

qt5sql

qt5xml

qt5network

qt5core

msvcp140

setupapi

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

shell32

ws2_32

wldap32

crypt32

advapi32

Exports

Exports

Sections

.text Size: - Virtual size: 977KB

.rdata Size: - Virtual size: 883KB

.data Size: - Virtual size: 18KB

.tls Size: - Virtual size: 9B

.gfids Size: - Virtual size: 88B

.G{v Size: - Virtual size: 9.2MB

.Wi4 Size: 7KB - Virtual size: 6KB

.;W_ Size: 13.8MB - Virtual size: 13.8MB

.reloc Size: 2KB - Virtual size: 1KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: - Virtual size: 977KB

.rdata
Size: - Virtual size: 883KB

.data
Size: - Virtual size: 18KB

.tls
Size: - Virtual size: 9B

.gfids
Size: - Virtual size: 88B

.G{v
Size: - Virtual size: 9.2MB

.Wi4
Size: 7KB - Virtual size: 6KB

.;W_
Size: 13.8MB - Virtual size: 13.8MB

.reloc
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 11KB - Virtual size: 10KB