378879df0d3e6d5bf4a776f3c6129b3f

Sharing

Copy URL Twitter E-mail

General

Target

378879df0d3e6d5bf4a776f3c6129b3f
Size

540KB
MD5

378879df0d3e6d5bf4a776f3c6129b3f
SHA1

ca90ac8a888329185249b32e4d40b2e204c99c34
SHA256

e30498b66303ed997fa9d8aca633683ec688dbee3c59f3a550f96037841a24b6
SHA512

919057225e6111f2b142c096ee8370c78a1c52259077004f8a3a7189dde6da7b46dc31ce006b90b23d0ffac0cbbd00ea29a0c50e221ecd4dd5dc34edda5e62a3
SSDEEP

6144:OLqsOwQkUgMkik+q+A+jR5eQyhMhihrEctcMvAUDacxnCTj+tERd5QnssqNVczPW:A5QMn1uzczPDr90DedY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
378879df0d3e6d5bf4a776f3c6129b3f

Files

378879df0d3e6d5bf4a776f3c6129b3f
.exe windows:4 windows x86 arch:x86

9840aab3819ea1571a625810ca84b376

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

libkdecore

_ZN16KLocalizedStringC1Ev
_Z5ki18nPKc
_ZN10KAboutDataC1ERK10QByteArrayS2_RK16KLocalizedStringS2_S5_NS_10LicenseKeyES5_S5_S2_S2_
_ZN16KLocalizedStringD1Ev
_ZN15KCmdLineOptionsC1Ev
_ZN15KCmdLineOptions3addERK10QByteArrayRK16KLocalizedStringS2_
_ZN12KCmdLineArgs17addCmdLineOptionsERK15KCmdLineOptionsRK16KLocalizedStringRK10QByteArrayS8_
_ZN12KCmdLineArgs4initEiPPcPK10KAboutData6QFlagsINS_13StdCmdLineArgEE
_ZN15KCmdLineOptionsD1Ev
_ZN10KAboutDataD1Ev

libkdeui

_ZN12KApplicationC1Eb

libkjs

_ZN3KJS7UString3Rep7destroyEv
_ZN3KJS4ListC1Ev
_ZN3KJS7UStringC1EPKNS_5UCharEi
_ZN3KJS8jsStringERKNS_7UStringE
_ZN3KJS11Interpreter24setShouldPrintExceptionsEb
_ZN3KJS7UStringC1EPKc
_ZNK3KJS11Interpreter12builtinArrayEv
_ZN3KJS10Identifier3addEPKc
_ZN3KJS11JSImmediate8toStringEPKNS_7JSValueE
_ZN3KJS4List7releaseEv
_ZN3KJS4List14appendSlowCaseEPNS_7JSValueE

libkjsembed

_ZN8KJSEmbed6conerrEv
_ZN8KJSEmbed6EngineC1Eb
_ZNK8KJSEmbed6Engine11interpreterEv
_ZNK8KJSEmbed6Engine9addObjectEP7QObjectRKN3KJS7UStringE
_ZN8KJSEmbed6Engine7runFileERKN3KJS7UStringE
_ZNK8KJSEmbed6Engine10completionEv
_ZN8KJSEmbed6EngineD1Ev
_ZN8KJSEmbed6conoutEv

qtcore4

_ZN11QTextStreamlsEPKc
_ZN11QTextStreamlsERK7QString
_Z4endlR11QTextStream
_Z5qFreePv
_ZN7QString4freeEPNS_4DataE
_ZN9QListData11detach_growEPii
_ZN9QListData6appendEv
_ZN5QTime5startEv
_ZN7QString16fromAscii_helperEPKci
_ZN9QListData11shared_nullE
_ZN7QString11shared_nullE
_ZN9QListData6detachEi
_ZN9QListData5eraseEPPv
_ZN5QCharC1Ec
_ZNK7QString7indexOfE5QChariN2Qt15CaseSensitivityE
_Z6qDebugPKcz
_ZN16QCoreApplicationC1ERiPPc
_ZNK5QTime7elapsedEv
_ZN16QCoreApplication18setApplicationNameERK7QString
_ZN5QTime7restartEv
_ZN7QStringC1EPK5QChari
_ZN7QString16codecForCStringsE
_ZN7QString9fromAsciiEPKci
_ZNK7QStringeqERKS_
_Z8qVersionv
_ZN7QStringaSERKS_
_ZNK7QStringeqERK13QLatin1String
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN10QByteArrayC1EPKc
_ZN10QByteArray11shared_nullE
_Z23qUnregisterResourceDataiPKhS0_S0_
_Z21qRegisterResourceDataiPKhS0_S0_

qtgui4

_ZN12QApplicationC1ERiPPci

kernel32

CloseHandle
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_write
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
fputc
fputs
free
fwrite
malloc
memcpy
printf
realloc
signal
sprintf
strcmp
strcpy
strlen
vfprintf

libgcc_s_sjlj-1

_Unwind_SjLj_Resume
_Unwind_SjLj_Register
_Unwind_SjLj_Unregister
_Unwind_GetTextRelBase
_Unwind_GetDataRelBase
_Unwind_GetRegionStart
_Unwind_GetLanguageSpecificData
_Unwind_GetIPInfo
_Unwind_SetGR
_Unwind_SetIP
_Unwind_DeleteException
_Unwind_SjLj_Resume_or_Rethrow
_Unwind_SjLj_RaiseException

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/35
Size: 275KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/47
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/61
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/73
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/86
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/108
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9840aab3819ea1571a625810ca84b376

Headers

File Characteristics

Imports

libkdecore

libkdeui

libkjs

libkjsembed

qtcore4

qtgui4

kernel32

msvcrt

libgcc_s_sjlj-1

Sections

.text Size: 44KB - Virtual size: 44KB

.data Size: 19KB - Virtual size: 18KB

.rdata Size: 9KB - Virtual size: 8KB

.bss Size: - Virtual size: 1024B

.idata Size: 6KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

/4 Size: 2KB - Virtual size: 1KB

/19 Size: 6KB - Virtual size: 6KB

/35 Size: 275KB - Virtual size: 275KB

/47 Size: 21KB - Virtual size: 21KB

/61 Size: 24KB - Virtual size: 23KB

/73 Size: 5KB - Virtual size: 5KB

/86 Size: 5KB - Virtual size: 5KB

/97 Size: 30KB - Virtual size: 29KB

/108 Size: 11KB - Virtual size: 10KB

.text
Size: 44KB - Virtual size: 44KB

.data
Size: 19KB - Virtual size: 18KB

.rdata
Size: 9KB - Virtual size: 8KB

.bss
Size: - Virtual size: 1024B

.idata
Size: 6KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

/4
Size: 2KB - Virtual size: 1KB

/19
Size: 6KB - Virtual size: 6KB

/35
Size: 275KB - Virtual size: 275KB

/47
Size: 21KB - Virtual size: 21KB

/61
Size: 24KB - Virtual size: 23KB

/73
Size: 5KB - Virtual size: 5KB

/86
Size: 5KB - Virtual size: 5KB

/97
Size: 30KB - Virtual size: 29KB

/108
Size: 11KB - Virtual size: 10KB