9e030f6d18432c934e62e32469f958d6fde3855f2d12b29eb0d60e841c687bcb

Sharing

Copy URL Twitter E-mail

General

Target

9e030f6d18432c934e62e32469f958d6fde3855f2d12b29eb0d60e841c687bcb
Size

2.1MB
MD5

64c4ca010a38744858c466ac26aa7908
SHA1

ac82c62449a2eaed88d0a34b8716ff2764018e46
SHA256

9e030f6d18432c934e62e32469f958d6fde3855f2d12b29eb0d60e841c687bcb
SHA512

c1e948020aceb1ebb0c797747d99f9d59dcc42568de56ecefb52541806aa74a0fdabd9517edf4479acc514896b66bdad561730b1ff0659464f19fe2be3631db1
SSDEEP

49152:0XiNQOZ7UJa+fYJTSEiuwA9eWyYDhYFZ5DQopLTN4I0P0HxDtbE6KvCy0t:AnOZwa+fYDwA9e3OKQ+LTN4I0P0HxDtN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e030f6d18432c934e62e32469f958d6fde3855f2d12b29eb0d60e841c687bcb

Files

9e030f6d18432c934e62e32469f958d6fde3855f2d12b29eb0d60e841c687bcb
.exe windows:6 windows x64 arch:x64

e935a29e20e4cff7f85a6db08b2065c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetLastInputInfo

qt6widgets

??1QMenu@@UEAA@XZ

qt6gui

??1QPen@@QEAA@XZ

qt6network

??1QNetworkRequest@@QEAA@XZ

qt6core

??0QUrl@@QEAA@XZ

asfoundation

??1ASLogConfig@@UEAA@XZ

aslocksdk

??1ASPlan@@UEAA@XZ

msvcp140

??1_Lockit@std@@QEAA@XZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-stdio-l1-1-0

fgetc

api-ms-win-crt-runtime-l1-1-0

exit

api-ms-win-crt-filesystem-l1-1-0

_lock_file

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

shell32

CommandLineToArgvW

Sections

.MPRESS1
Size: 1.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e935a29e20e4cff7f85a6db08b2065c0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

qt6widgets

qt6gui

qt6network

qt6core

asfoundation

aslocksdk

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

shell32

Sections

.MPRESS1 Size: 1.7MB - Virtual size: 2.7MB

.MPRESS2 Size: 4KB - Virtual size: 4KB

.rsrc Size: 365KB - Virtual size: 364KB

.MPRESS1
Size: 1.7MB - Virtual size: 2.7MB

.MPRESS2
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 365KB - Virtual size: 364KB