General

  • Target
    PollyMC-Windows-MinGW-w64-Setup-8.0.exe
  • Size 36.6MB
  • Sample240223-pn1fysff6w
  • SHA256 1c04ed11ce29fcfc3186144f0f907b70296132eb3db89044463cb14b97eb87d0
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 60 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • PollyMC-Windows-MinGW-w64-Setup-8.0.exe
    .exe 36.6MB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 7KB
  • Qt6Core.dll
    .dll 6.4MB
  • Qt6Core5Compat.dll
    .dll 408KB
  • Qt6Gui.dll
    .dll 8.8MB
  • Qt6Network.dll
    .dll 2.0MB
  • Qt6Svg.dll
    .dll 388KB
  • Qt6Widgets.dll
    .dll 7.3MB
  • Qt6Xml.dll
    .dll 187KB
  • iconengines/qsvgicon.dll
    .dll 67KB
  • imageformats/qgif.dll
    .dll 47KB
  • imageformats/qicns.dll
    .dll 55KB
  • imageformats/qico.dll
    .dll 49KB
  • imageformats/qjp2.dll
    .dll 52KB
  • imageformats/qjpeg.dll
    .dll 60KB
  • imageformats/qsvg.dll
    .dll 40KB
  • imageformats/qwbmp.dll
    .dll 35KB
  • imageformats/qwebp.dll
    .dll 46KB
  • jars/JavaCheck.jar
    .jar 1KB
  • jars/NewLaunch.jar
    .jar 12KB
  • jars/NewLaunchLegacy.jar
    .jar 22KB
  • libb2-1.dll
    .dll 42KB
  • libbrotlicommon.dll
    .dll .js 145KB
  • libbrotlidec.dll
    .dll 63KB
  • libbz2-1.dll
    .dll 96KB
  • libc++.dll
    .dll 1.4MB
  • libcmark.dll
    .dll 249KB
  • libdouble-conversion.dll
    .dll 78KB
  • libfreetype-6.dll
    .dll 828KB
  • libglib-2.0-0.dll
    .dll 1.5MB
  • libgraphite2.dll
    .dll 149KB
  • libharfbuzz-0.dll
    .dll 1.2MB
  • libiconv-2.dll
    .dll 1.1MB
  • libicudt74.dll
    .dll 29.4MB
  • libicuin74.dll
    .dll 3.5MB
  • libicuuc74.dll
    .dll 2.0MB
  • libintl-8.dll
    .dll 196KB
  • libjasper.dll
    .dll 379KB
  • libjpeg-8.dll
    .dll 927KB
  • libmd4c.dll
    .dll 78KB
  • libpcre2-16-0.dll
    .dll 353KB
  • libpcre2-8-0.dll
    .dll 392KB
  • libpng16-16.dll
    .dll 269KB
  • libquazip1-qt6.dll
    .dll 250KB
  • libsharpyuv-0.dll
    .dll 44KB
  • libwebp-7.dll
    .dll 642KB
  • libwebpdemux-2.dll
    .dll 30KB
  • libwebpmux-3.dll
    .dll 60KB
  • libwinpthread-1.dll
    .dll 88KB
  • libzstd.dll
    .dll 999KB
  • platforms/qdirect2d.dll
    .dll 1.4MB
  • platforms/qwindows.dll
    .dll 1.3MB
  • pollymc.exe
    .exe 15.0MB
  • pollymc_filelink.exe
    .exe 623KB
  • pollymc_updater.exe
    .exe 1.1MB
  • qt.conf
    1B
  • qtlogging.ini
    509B
  • styles/qwindowsvistastyle.dll
    .dll 177KB
  • tls/qschannelbackend.dll
    .dll 235KB
  • uninstall.exe
    .exe 220KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/nsExec.dll
    .dll 7KB
  • zlib1.dll
    .dll 108KB

PollyMC-Windows-MinGW-w64-Setup-8.0.exe

  • IMPHASH 56a78d55f3f7af51443e58e0ce2fb5f6
  • SHA256 1c04ed11ce29fcfc3186144f0f907b70296132eb3db89044463cb14b97eb87d0
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13613
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths