Static task
static1
Behavioral task
behavioral1
Sample
4de89149593db5d1b1d0e3b37768e151.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4de89149593db5d1b1d0e3b37768e151.exe
Resource
win10v2004-20231215-en
General
-
Target
4de89149593db5d1b1d0e3b37768e151
-
Size
154KB
-
MD5
4de89149593db5d1b1d0e3b37768e151
-
SHA1
a3f289673e73a7f1df5bb44e376a743f01e25f05
-
SHA256
08aba5c1d31db013239e7d540d2ba5ea31795b87d073c02c4a906582afe5aa93
-
SHA512
c2eedb9ec7aa75743ed44559286b22b3628e2b3ba4606d0674113e4ccc1638af55d97339bb96feb2a71555ca29ff098645cba64baaf9c9281f163d0bcb66ab65
-
SSDEEP
1536:nD9cbIrj0rNKcDRb02G2klIwqEqclxjZ5m8XJAIs:DGbIrYkcD82klIwqEqclxjzm8a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4de89149593db5d1b1d0e3b37768e151
Files
-
4de89149593db5d1b1d0e3b37768e151.exe windows:6 windows x64 arch:x64
8abcc8192b60e3e0203f0ff3268f4fc8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
qt5widgets
?qt_metacast@QWidget@@UEAAPEAXPEBD@Z
?qt_metacall@QWidget@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?staticMetaObject@QWidget@@2UQMetaObject@@B
?staticMetaObject@QMainWindow@@2UQMetaObject@@B
?qt_metacast@QMainWindow@@UEAAPEAXPEBD@Z
?qt_metacall@QMainWindow@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?metaObject@QAction@@UEBAPEBUQMetaObject@@XZ
?qt_metacast@QAction@@UEAAPEAXPEBD@Z
?qt_metacall@QAction@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??0QAction@@QEAA@AEBVQString@@PEAVQObject@@@Z
??1QAction@@UEAA@XZ
?setShortcuts@QAction@@QEAAXW4StandardKey@QKeySequence@@@Z
?event@QAction@@MEAA_NPEAVQEvent@@@Z
?addAction@QWidget@@QEAAXPEAVQAction@@@Z
??0QMainWindow@@QEAA@PEAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
?menuBar@QMainWindow@@QEBAPEAVQMenuBar@@XZ
?setCentralWidget@QMainWindow@@QEAAXPEAVQWidget@@@Z
?createPopupMenu@QMainWindow@@UEAAPEAVQMenu@@XZ
?contextMenuEvent@QMainWindow@@MEAAXPEAVQContextMenuEvent@@@Z
?event@QMainWindow@@MEAA_NPEAVQEvent@@@Z
?addMenu@QMenuBar@@QEAAPEAVQMenu@@AEBVQString@@@Z
?show@QWidget@@QEAAXXZ
??0QApplication@@QEAA@AEAHPEAPEADH@Z
??1QApplication@@UEAA@XZ
?exec@QApplication@@SAHXZ
??1QMainWindow@@UEAA@XZ
??0QWidget@@QEAA@PEAV0@V?$QFlags@W4WindowType@Qt@@@@@Z
??1QWidget@@UEAA@XZ
?devType@QWidget@@UEBAHXZ
?setVisible@QWidget@@UEAAX_N@Z
?sizeHint@QWidget@@UEBA?AVQSize@@XZ
?minimumSizeHint@QWidget@@UEBA?AVQSize@@XZ
?heightForWidth@QWidget@@UEBAHH@Z
?hasHeightForWidth@QWidget@@UEBA_NXZ
?setLayout@QWidget@@QEAAXPEAVQLayout@@@Z
?paintEngine@QWidget@@UEBAPEAVQPaintEngine@@XZ
?event@QWidget@@MEAA_NPEAVQEvent@@@Z
?mousePressEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?mouseReleaseEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?mouseMoveEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?wheelEvent@QWidget@@MEAAXPEAVQWheelEvent@@@Z
?keyPressEvent@QWidget@@MEAAXPEAVQKeyEvent@@@Z
?keyReleaseEvent@QWidget@@MEAAXPEAVQKeyEvent@@@Z
?focusInEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z
?focusOutEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z
?enterEvent@QWidget@@MEAAXPEAVQEvent@@@Z
?leaveEvent@QWidget@@MEAAXPEAVQEvent@@@Z
?paintEvent@QWidget@@MEAAXPEAVQPaintEvent@@@Z
?moveEvent@QWidget@@MEAAXPEAVQMoveEvent@@@Z
?resizeEvent@QWidget@@MEAAXPEAVQResizeEvent@@@Z
?closeEvent@QWidget@@MEAAXPEAVQCloseEvent@@@Z
?contextMenuEvent@QWidget@@MEAAXPEAVQContextMenuEvent@@@Z
?tabletEvent@QWidget@@MEAAXPEAVQTabletEvent@@@Z
?actionEvent@QWidget@@MEAAXPEAVQActionEvent@@@Z
?dragEnterEvent@QWidget@@MEAAXPEAVQDragEnterEvent@@@Z
?dragMoveEvent@QWidget@@MEAAXPEAVQDragMoveEvent@@@Z
?dragLeaveEvent@QWidget@@MEAAXPEAVQDragLeaveEvent@@@Z
?dropEvent@QWidget@@MEAAXPEAVQDropEvent@@@Z
?showEvent@QWidget@@MEAAXPEAVQShowEvent@@@Z
?hideEvent@QWidget@@MEAAXPEAVQHideEvent@@@Z
?nativeEvent@QWidget@@MEAA_NAEBVQByteArray@@PEAXPEAJ@Z
?changeEvent@QWidget@@MEAAXPEAVQEvent@@@Z
?metric@QWidget@@MEBAHW4PaintDeviceMetric@QPaintDevice@@@Z
?initPainter@QWidget@@MEBAXPEAVQPainter@@@Z
?redirected@QWidget@@MEBAPEAVQPaintDevice@@PEAVQPoint@@@Z
?sharedPainter@QWidget@@MEBAPEAVQPainter@@XZ
?inputMethodEvent@QWidget@@MEAAXPEAVQInputMethodEvent@@@Z
?inputMethodQuery@QWidget@@UEBA?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?focusNextPrevChild@QWidget@@MEAA_N_N@Z
?checkStateSet@QAbstractButton@@MEAAXXZ
?nextCheckState@QAbstractButton@@MEAAXXZ
?keyReleaseEvent@QAbstractButton@@MEAAXPEAVQKeyEvent@@@Z
?mousePressEvent@QAbstractButton@@MEAAXPEAVQMouseEvent@@@Z
?mouseReleaseEvent@QAbstractButton@@MEAAXPEAVQMouseEvent@@@Z
?mouseMoveEvent@QAbstractButton@@MEAAXPEAVQMouseEvent@@@Z
?changeEvent@QAbstractButton@@MEAAXPEAVQEvent@@@Z
?timerEvent@QAbstractButton@@MEAAXPEAVQTimerEvent@@@Z
?geometry@QLayout@@UEBA?AVQRect@@XZ
?indexOf@QLayout@@UEBAHPEAVQWidget@@@Z
?isEmpty@QLayout@@UEBA_NXZ
?controlTypes@QLayout@@UEBA?AV?$QFlags@W4ControlType@QSizePolicy@@@@XZ
?layout@QLayout@@UEAAPEAV1@XZ
?childEvent@QLayout@@MEAAXPEAVQChildEvent@@@Z
?metaObject@QPushButton@@UEBAPEBUQMetaObject@@XZ
?qt_metacast@QPushButton@@UEAAPEAXPEBD@Z
?sizeHint@QGridLayout@@UEBA?AVQSize@@XZ
??0QPushButton@@QEAA@AEBVQString@@PEAVQWidget@@@Z
??1QPushButton@@UEAA@XZ
?sizeHint@QPushButton@@UEBA?AVQSize@@XZ
?minimumSizeHint@QPushButton@@UEBA?AVQSize@@XZ
?event@QPushButton@@MEAA_NPEAVQEvent@@@Z
?qt_metacall@QPushButton@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?paintEvent@QPushButton@@MEAAXPEAVQPaintEvent@@@Z
?keyPressEvent@QPushButton@@MEAAXPEAVQKeyEvent@@@Z
?focusInEvent@QPushButton@@MEAAXPEAVQFocusEvent@@@Z
?focusOutEvent@QPushButton@@MEAAXPEAVQFocusEvent@@@Z
?hitButton@QPushButton@@MEBA_NAEBVQPoint@@@Z
?widget@QLayoutItem@@UEAAPEAVQWidget@@XZ
?spacerItem@QLayoutItem@@UEAAPEAVQSpacerItem@@XZ
?metaObject@QGridLayout@@UEBAPEBUQMetaObject@@XZ
?qt_metacast@QGridLayout@@UEAAPEAXPEBD@Z
?qt_metacall@QGridLayout@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??0QGridLayout@@QEAA@XZ
?addItem@QGridLayout@@MEAAXPEAVQLayoutItem@@@Z
?setGeometry@QGridLayout@@UEAAXAEBVQRect@@@Z
?count@QGridLayout@@UEBAHXZ
?takeAt@QGridLayout@@UEAAPEAVQLayoutItem@@H@Z
?itemAt@QGridLayout@@UEBAPEAVQLayoutItem@@H@Z
?addWidget@QGridLayout@@QEAAXPEAVQWidget@@HHV?$QFlags@W4AlignmentFlag@Qt@@@@@Z
?invalidate@QGridLayout@@UEAAXXZ
?expandingDirections@QGridLayout@@UEBA?AV?$QFlags@W4Orientation@Qt@@@@XZ
?minimumHeightForWidth@QGridLayout@@UEBAHH@Z
?heightForWidth@QGridLayout@@UEBAHH@Z
?hasHeightForWidth@QGridLayout@@UEBA_NXZ
?maximumSize@QGridLayout@@UEBA?AVQSize@@XZ
?minimumSize@QGridLayout@@UEBA?AVQSize@@XZ
??1QGridLayout@@UEAA@XZ
qt5core
?staticMetaObject@QObject@@2UQMetaObject@@B
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??4QByteArray@@QEAAAEAV0@$$QEAV0@@Z
??0QByteArray@@QEAA@XZ
?size@QByteArray@@QEBAHXZ
?data@QByteArray@@QEAAPEADXZ
?constData@QByteArray@@QEBAPEBDXZ
??8QString@@QEBA_NPEBD@Z
?dispose@QListData@@QEAAXXZ
?instance@QCoreApplication@@SAPEAV1@XZ
?detach@QListData@@QEAAPEAUData@1@H@Z
?realloc@QListData@@QEAAXH@Z
?dispose@QListData@@SAXPEAUData@1@@Z
?arguments@QCoreApplication@@SA?AVQStringList@@XZ
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
??1QDateTime@@QEAA@XZ
?toString@QDateTime@@QEBA?AVQString@@AEBV2@@Z
?currentDateTime@QDateTime@@SA?AV1@XZ
?hash@QCryptographicHash@@SA?AVQByteArray@@AEBV2@W4Algorithm@1@@Z
??1Connection@QMetaObject@@QEAA@XZ
?tempPath@QDir@@SA?AVQString@@XZ
?readAll@QIODevice@@QEAA?AVQByteArray@@XZ
?utf16@QString@@QEBAPEBGXZ
?shared_null@QListData@@2UData@1@B
??0QFile@@QEAA@XZ
?setFileName@QFile@@QEAAXAEBVQString@@@Z
?mid@QContainerImplHelper@QtPrivate@@SA?AW4CutResult@12@HPEAH0@Z
?writableLocation@QStandardPaths@@SA?AVQString@@W4StandardLocation@1@@Z
?clear@QByteArray@@QEAAXXZ
?number@QByteArray@@SA?AV1@_JH@Z
?connect@QObject@@SA?AVConnection@QMetaObject@@PEBV1@PEBD01W4ConnectionType@Qt@@@Z
?registerResource@QResource@@SA_NPEBEAEBVQString@@@Z
??0QString@@QEAA@PEBD@Z
??0QTranslator@@QEAA@PEAVQObject@@@Z
??1QTranslator@@UEAA@XZ
?load@QTranslator@@QEAA_NAEBVQString@@000@Z
?installTranslator@QCoreApplication@@SA_NPEAVQTranslator@@@Z
??1QLocale@@QEAA@XZ
?name@QLocale@@QEBA?AVQString@@XZ
?system@QLocale@@SA?AV1@XZ
??1QByteArray@@QEAA@XZ
??0QByteArray@@QEAA@AEBV0@@Z
??YQByteArray@@QEAAAEAV0@AEBV0@@Z
??4QString@@QEAAAEAV0@$$QEAV0@@Z
??YQString@@QEAAAEAV0@VQChar@@@Z
??YQString@@QEAAAEAV0@AEBV0@@Z
?toLocal8Bit@QString@@QEGBA?AVQByteArray@@XZ
?toLocal8Bit@QString@@QEHAA?AVQByteArray@@XZ
?fromUtf8@QString@@SA?AV1@PEBDH@Z
??0QString@@QEAA@AEBVQByteArray@@@Z
??4QString@@QEAAAEAV0@AEBVQByteArray@@@Z
??0QString@@QEAA@AEBV0@@Z
?isDigit@QCharRef@@QEBA_NXZ
??0QString@@QEAA@XZ
?front@QString@@QEAA?AVQCharRef@@XZ
?write@QIODevice@@QEAA_JAEBVQByteArray@@@Z
??0QCryptographicHash@@QEAA@W4Algorithm@0@@Z
??1QCryptographicHash@@QEAA@XZ
?addData@QCryptographicHash@@QEAA_NPEAVQIODevice@@@Z
?result@QCryptographicHash@@QEBA?AVQByteArray@@XZ
??8@YA_NAEBVQString@@0@Z
?toNativeSeparators@QDir@@SA?AVQString@@AEBV2@@Z
?separator@QDir@@SA?AVQChar@@XZ
?read@QIODevice@@QEAA?AVQByteArray@@_J@Z
?write@QIODevice@@QEAA_JPEBD@Z
?close@QFileDevice@@UEAAXXZ
??4QString@@QEAAAEAV0@AEBV0@@Z
?right@QString@@QEBA?AV1@H@Z
?number@QString@@SA?AV1@_JH@Z
?machineUniqueId@QSysInfo@@SA?AVQByteArray@@XZ
??0QFile@@QEAA@AEBVQString@@@Z
??1QFile@@UEAA@XZ
?open@QFile@@UEAA_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?toHex@QByteArray@@QEBA?AV1@XZ
??0QObject@@QEAA@PEAV0@@Z
??1QObject@@UEAA@XZ
?hash@QMessageAuthenticationCode@@SA?AVQByteArray@@AEBV2@0W4Algorithm@QCryptographicHash@@@Z
??1QString@@QEAA@XZ
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
kernel32
GetCommandLineW
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
LocalFree
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentProcessId
WideCharToMultiByte
WriteFile
CreateProcessW
GetProcAddress
CloseHandle
LoadLibraryA
Sleep
WaitForSingleObject
GetCurrentProcess
advapi32
OpenProcessToken
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_destroy
__std_exception_copy
__current_exception_context
__current_exception
__C_specific_handler
__std_terminate
_CxxThrowException
memset
api-ms-win-crt-runtime-l1-1-0
terminate
_initialize_onexit_table
_cexit
_c_exit
_initterm
_register_onexit_function
_get_narrow_winmain_command_line
_initialize_narrow_environment
_configure_narrow_argv
_exit
exit
_crt_atexit
_register_thread_local_exe_atexit_callback
_set_app_type
_seh_filter_exe
_initterm_e
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
_callnewh
free
_set_new_mode
malloc
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
shell32
CommandLineToArgvW
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ