Static task
static1
Behavioral task
behavioral1
Sample
343a33fd6d96d554b47016b89c61a54c82c5ceee5dafd09eed9ce3f17bc0b9c3.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
343a33fd6d96d554b47016b89c61a54c82c5ceee5dafd09eed9ce3f17bc0b9c3.exe
Resource
win10v2004-20231020-en
General
-
Target
343a33fd6d96d554b47016b89c61a54c82c5ceee5dafd09eed9ce3f17bc0b9c3
-
Size
94KB
-
MD5
951f8aee4b276aa96cff308fe5be8a77
-
SHA1
d6cbfb7cef54fcee5ab1a2fc03fa2670da455ab2
-
SHA256
343a33fd6d96d554b47016b89c61a54c82c5ceee5dafd09eed9ce3f17bc0b9c3
-
SHA512
e60da4d3c8abf6dfcf322c3bae2fa4b7f10ff17c449400019baffa95c2b113bf9d2395024829caa45d0be6a843a90f3ad97aeb817243a236ad235420d9f319bc
-
SSDEEP
1536:etFMp8CPvka6yFxio8r1qs1tmnBTX+B3e7NIoZz/w4jvbZmi:e0pxV6yTiouIBCeJRD5f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 343a33fd6d96d554b47016b89c61a54c82c5ceee5dafd09eed9ce3f17bc0b9c3
Files
-
343a33fd6d96d554b47016b89c61a54c82c5ceee5dafd09eed9ce3f17bc0b9c3.exe windows:4 windows x64 arch:x64
87d1be3d4c9057e85e6c10b1d76f419c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
qt6core
_ZN11QDataStreamlsEb
_ZN11QDataStreamrsERb
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QTextStreamlsEPKc
_ZN11QTextStreamlsEc
_ZN16QCoreApplication9translateEPKcS1_S1_i
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject13setObjectNameE14QAnyStringView
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK7QObject10objectNameEv
qt_version_tag_6_6
qt6gui
_ZN5QFont12setUnderlineEb
_ZN5QFont8setStyleENS_5StyleE
_ZN5QFont9setWeightENS_6WeightE
_ZN5QFontC1ERKS_
_ZN5QFontD1Ev
_ZN6QBrushC1ERK6QColorN2Qt10BrushStyleE
_ZN6QBrushD1Ev
_ZN6QColorC1EN2Qt11GlobalColorE
_ZN8QPalette8setBrushENS_10ColorGroupENS_9ColorRoleERK6QBrush
_ZN8QPaletteC1ERKS_
_ZN8QPaletteD1Ev
qt6widgets
_ZN11QPushButtonC1EP7QWidget
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN12QRadioButtonC1EP7QWidget
_ZN14QPlainTextEdit5clearEv
_ZN14QPlainTextEditC1EP7QWidget
_ZN15QAbstractButton10setCheckedEb
_ZN15QAbstractButton7setTextERK7QString
_ZN7QDialog10closeEventEP11QCloseEvent
_ZN7QDialog10setVisibleEb
_ZN7QDialog11eventFilterEP7QObjectP6QEvent
_ZN7QDialog11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QDialog11qt_metacastEPKc
_ZN7QDialog11resizeEventEP12QResizeEvent
_ZN7QDialog13keyPressEventEP9QKeyEvent
_ZN7QDialog16contextMenuEventEP17QContextMenuEvent
_ZN7QDialog16staticMetaObjectE
_ZN7QDialog4doneEi
_ZN7QDialog4execEv
_ZN7QDialog4openEv
_ZN7QDialog6acceptEv
_ZN7QDialog6rejectEv
_ZN7QDialog9showEventEP10QShowEvent
_ZN7QDialogC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QDialogD2Ev
_ZN7QWidget10enterEventEP11QEnterEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setPaletteERK8QPalette
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPx
_ZN7QWidget11setGeometryERK5QRect
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget4showEv
_ZN7QWidget5closeEv
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget7setFontERK5QFont
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN9QCheckBoxC1EP7QWidget
_ZN9QSplitter14setOrientationEN2Qt11OrientationE
_ZN9QSplitter9addWidgetEP7QWidget
_ZN9QSplitterC1EP7QWidget
_ZNK15QAbstractButton9isCheckedEv
_ZNK7QDialog15minimumSizeHintEv
_ZNK7QDialog8sizeHintEv
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget7paletteEv
_ZThn16_NK7QWidget10redirectedEP6QPoint
_ZThn16_NK7QWidget11initPainterEP8QPainter
_ZThn16_NK7QWidget11paintEngineEv
_ZThn16_NK7QWidget13sharedPainterEv
_ZThn16_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn16_NK7QWidget7devTypeEv
libgcc_s_seh-1
_Unwind_Resume
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetLastError
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LocalFree
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strcmp
strlen
strncmp
vfprintf
shell32
CommandLineToArgvW
libstdc++-6
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPvy
_Znay
_Znwy
__cxa_throw_bad_array_new_length
__gxx_personality_seh0
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qtversi Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 384B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ