Fake-QR-Logger-main.zip
- SHA256 86e26870c374db439a137ea800a2ac917504c88a041c033bbe78d876643cb4fb
Overview
overview
8Static
static
1Fake-QR-Lo...in.zip
windows10-1703-x64
1Fake-QR-Lo...ignore
windows10-1703-x64
3Fake-QR-Lo...ICENSE
windows10-1703-x64
8Fake-QR-Lo...DME.md
windows10-1703-x64
3Fake-QR-Lo...ay.png
windows10-1703-x64
3Fake-QR-Lo...g.json
windows10-1703-x64
3Fake-QR-Lo...er.exe
windows10-1703-x64
1Fake-QR-Lo..._1.png
windows10-1703-x64
3Fake-QR-Lo..._2.png
windows10-1703-x64
3Fake-QR-Lo..._3.png
windows10-1703-x64
3Fake-QR-Lo...ain.py
windows10-1703-x64
3Fake-QR-Lo...es.txt
windows10-1703-x64
1Fake-QR-Lo...ts.txt
windows10-1703-x64
1Fake-QR-Lo...up.bat
windows10-1703-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Fake-QR-Logger-main.zip
Resource
win10-20240221-en
windows10-1703-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fake-QR-Logger-main/.gitignore
Resource
win10-20240221-en
windows10-1703-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Fake-QR-Logger-main/LICENSE
Resource
win10-20240214-en
windows10-1703-x64
22 signatures
150 seconds
Behavioral task
behavioral4
Sample
Fake-QR-Logger-main/README.md
Resource
win10-20240221-en
windows10-1703-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
Fake-QR-Logger-main/components/qr_overlay.png
Resource
win10-20240221-en
windows10-1703-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
Fake-QR-Logger-main/config.json
Resource
win10-20240221-en
windows10-1703-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
Fake-QR-Logger-main/geckodriver.exe
Resource
win10-20240221-en
windows10-1703-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Fake-QR-Logger-main/img/preview_1.png
Resource
win10-20240221-en
windows10-1703-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
Fake-QR-Logger-main/img/preview_2.png
Resource
win10-20240221-en
windows10-1703-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
Fake-QR-Logger-main/img/preview_3.png
Resource
win10-20240221-en
windows10-1703-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
Fake-QR-Logger-main/main.py
Resource
win10-20240221-en
windows10-1703-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
Fake-QR-Logger-main/proxies.txt
Resource
win10-20240221-en
windows10-1703-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Fake-QR-Logger-main/requirements.txt
Resource
win10-20240221-en
windows10-1703-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Fake-QR-Logger-main/setup.bat
Resource
win10-20240221-en
windows10-1703-x64
1 signatures
150 seconds
General
- Target Fake-QR-Logger-main.zip
- Size 1.7MB
- Sample240224-qs1g7ada73
- SHA256 86e26870c374db439a137ea800a2ac917504c88a041c033bbe78d876643cb4fb
- MD5 2144b0325e7ca47d183872fa565f24ae
- SHA1 1a57803dac5f7061579e5da87319d5d220436429
- SHA512 31bb4afff28de0bc8d55b85255473d88e9ed3b155fc33c5e360bcfa0170d01352116577641eb965a362221ca4dfbf367a1580015f5e222763ddc4254b1e94a79
- SSDEEP 49152:2AV3Te3GOXlOoC6ZnKTFXHC3uxX9WzZSkWD1JK:2AVDuGSXVEHOuxkFSzDK
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
Fake-QR-Logger-main.zip.zip 1.7MB
-
Fake-QR-Logger-main/.gitignore3KB
-
Fake-QR-Logger-main/LICENSE1KB
-
Fake-QR-Logger-main/README.md4KB
-
Fake-QR-Logger-main/components/qr_overlay.png.png 12KB
-
Fake-QR-Logger-main/config.json89B
-
Fake-QR-Logger-main/geckodriver.exe.exe 3.7MB
-
Fake-QR-Logger-main/img/preview_1.png.png 10KB
-
Fake-QR-Logger-main/img/preview_2.png.png 23KB
-
Fake-QR-Logger-main/img/preview_3.png.png 17KB
-
Fake-QR-Logger-main/main.py15KB
-
Fake-QR-Logger-main/proxies.txt49B
-
Fake-QR-Logger-main/requirements.txt46B
-
Fake-QR-Logger-main/setup.bat134B
Fake-QR-Logger-main/.gitignore
- SHA256 5e2c671ddc9e301dafc241ad1a7c07aa85a91fef560a17721b41977b9eddba17
- MD5 83a915b86b03f694b477f01afb8b957e
- SHA1 f26b232e1292ac4c2470694cd3f0fa80f99c97ce
- SHA512 c5161458eb15372c5b375ea68de6d00b1c8d217090d33be553a2eb45176e06a7b03fb59397abeccbd346c83da2152322541b2f3ca6ad96f00f4469a9a79a3d7d
- MD5 SHA1 SHA512
Fake-QR-Logger-main/LICENSE
- SHA256 f3287b3ccf71662fa0093a9d6ba22d4394fd8928579f298925e034f9e5aa8701
- MD5 1f36743412d7810617378f5e9b32c585
- SHA1 532d75c06172c583f5fb72d77854cdb06c360b07
- SHA512 33afd38db12e8d2128fabe6e2ed9745955525e636a0310a3e873848f20eb00d3219d49817b89dc502888e7a2542c88bcd781d54e359bc7ddb2de1b31e9fbb686
- MD5 SHA1 SHA512
Fake-QR-Logger-main/README.md
- SHA256 85c27bd6c6c11e8130124a81cc9b48879a23345dab49ffaa508d90cbc30ec530
- MD5 f52d922ce63a057e00a726c419e8f226
- SHA1 7bd0ce0420cad9a3f2c26c7ef73707051080cd9f
- SHA512 d33c0350421199caf22198a1470c41917ee85268c9b8881cd3661603ac3cb257732a17b7113790d36568469575d495c455d06b08a3cbb8a115d6ca143e3ecec6
- SSDEEP 96:62HWAfg9k+V7v2CczeczCczjOvxBI5XlrCcgbk+k8PIYfb7kTjgpA4Nmobjt+99i:6xAo9j/aeaCaCvxBI5Vupk+clyXI9GOC
- MD5 SHA1 SHA512 SSDEEP
Fake-QR-Logger-main/components/qr_overlay.png
- SHA256 5019770c7283cd458df8e0488f3cf94195f9694d158be97bbe17798aa3e157f3
- MD5 a0f781a0a45f31633c07927e19b55548
- SHA1 55d43ffb29ee2b2907f2268a5a7accb56959527b
- SHA512 6dbaa9b2efc00eb8208fee51d1305bf76c04bbfbe0b17a892158a32b1a2c1683d9ef5bc1e83b0d251084d4c89118a153c990811271b6ee0d0babcfd5d97b8330
- SSDEEP 384:ekaoNZ0u21bohavSIMbbpO2L9v/wweXem:ek5b21DvNqNv1wem
- MD5 SHA1 SHA512 SSDEEP
Fake-QR-Logger-main/config.json
- SHA256 3c1da4f92f0c45e02dc4efaa199dbf9564dea9c4ea63c06dc251acf67faa12a0
- MD5 80c9c4112fe3c3dd195e8a25ac8aa018
- SHA1 47a8422873b26fc3d9dca9dfabfcbef9c5b1fc05
- SHA512 f0782f99978b1b1af2b745272d70bfaa535bae4f64d275839cf9c7fc0dd08cb1d71264d5ecfa892ea29278ff6e595db8d1e80640e68b0b1f6903569ab9b38ff4
- MD5 SHA1 SHA512
Fake-QR-Logger-main/geckodriver.exe
- IMPHASH 5544a9515ff81697ef9b7e0835f59a19
- SHA256 84b42a989d543b3b18158f0b404f851f929ee595ae1c4283d2d98a978882b096
- MD5 1a2e44c1812c7cbec91af0df08b15857
- SHA1 713f4e600d34a55750a6e367b7a8f9e00712afbf
- SHA512 8bee56926f87a10f7f4cd115b69ecab24a82145ee39d1dd5e62c721cb66d59bf6d548d936924d57f6feb50aee7aee858d2d83ba1e8d9b23d0b4ce27de05bf4c2
- SSDEEP 49152:L4FeQ9uFEON7ivoV555sgyPHRpLaMNr7a9hzyxeyrXiyeIOXYX9Sv5ofV54730ai:1nuzCExxeyrMse0j+mVF
- MD5 SHA1 SHA512 SSDEEP
Digest
c8:65:13:ba:15:c6:f3:64:d5:24:0c:0e:bf:3c:25:e5:77:45:01:70:df:cb:7c:6d:71:37:c8:3e:05:88:0d:5a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
Chains
Apr 2, 2023
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
Serial Number
0c:1c:d3:ee:a4:7e:dd:a7:a0:32:57:3b:01:4d:0a:fd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 9, 2021 - Jun 19, 2024
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 21, 2022 - Nov 21, 2033
Minor OS version
0
Major OS version
6
Entry point
2834464
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
/builds/worker/workspace/build/src/target/x86_64-pc-windows-msvc/release/deps/geckodriver.pdb
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredExceptionHandler
CancelIo
CloseHandle
CompareStringOrdinal
CompareStringW
CopyFileExW
CreateDirectoryW
CreateEventW
CreateFileW
CreateIoCompletionPort
CreateMutexA
CreateNamedPipeW
CreateProcessW
CreateThread
DeleteCriticalSection
DuplicateHandle
EncodePointer
EnterCriticalSection
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessId
GetQueuedCompletionStatusEx
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTempPathW
GetTimeZoneInformation
GetWindowsDirectoryW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
MoveFileExW
MultiByteToWideChar
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReadFileEx
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
SetEnvironmentVariableW
SetFileAttributesW
SetFileCompletionNotificationModes
SetFileInformationByHandle
SetFilePointerEx
SetHandleInformation
SetLastError
SetStdHandle
SetThreadStackGuarantee
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SleepEx
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
WriteFileEx
ws2_32
WSACleanup
WSAGetLastError
WSAIoctl
WSASocketW
WSAStartup
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getsockname
getsockopt
ioctlsocket
listen
recv
send
setsockopt
shutdown
advapi32
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
SystemFunction036
ntdll
NtCancelIoFileEx
NtCreateFile
NtDeviceIoControlFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlNtStatusToDosError
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
bcrypt
BCryptGenRandom
Name
.text
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
813KB
Virtual Size
813KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
55KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
449B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Fake-QR-Logger-main/img/preview_1.png
- SHA256 bd16e1666fd40d1f660aaff133e6a3891c83a9d7451b96907af020c6750e80b9
- MD5 e5ad6b8615f0d98a7d06d5c8eb78f11e
- SHA1 d11d8324c82b13d146654797d15a732a0267971f
- SHA512 0e35d99a416f54addaea92d1b65c8faa160b22ffd57dc3342b132a5de046ad80f27a245575728ea80057b2fe831c19f4c10a1b394591809b7ab4d4e3cdc14a55
- SSDEEP 192:1HQ/LFb6KIvC9cnB1h+77az+rNEQvEwL4yLQvwsod0Gxor9nncW:1HQxeDvvB1sk+JTQ9od7etcW
- MD5 SHA1 SHA512 SSDEEP
Fake-QR-Logger-main/img/preview_2.png
- SHA256 f346c1a67c20d1902a9e24fcaf0a627ed68e9ba5a742dd8e72afb3790d446fff
- MD5 6c90cb6533fbfdd5b3a6dc4b18a08ea4
- SHA1 62126a1f6887b72977a58a0cdeb74b6f4bb46e44
- SHA512 743b101e68d5daffee14bbde24c0f8617655cd84b484134a4055d8a1cc12340fc607abefa32632bb8760b2996cd2d3a5725fff3d46f86cc1e993addc107a4402
- SSDEEP 384:bWoIezQml/ubM7s5OuRyoEY3YyRv1PGcMsRGaZym4wpC04joYBQoMWWf2PQPDvVa:agCbqs5Dlat1NrlL8yQrWWHPDo
- MD5 SHA1 SHA512 SSDEEP
Fake-QR-Logger-main/img/preview_3.png
- SHA256 7a3ae8b71af490aeae974daa216a1ae8cfd81f2a7425624fc74ad9fce5bb5295
- MD5 0c9241adeb45c58e744eefc9ce325dcb
- SHA1 2768bd890588c7813090b0de464683ae9a9bb383
- SHA512 feb2b5000bac051f653c6aea8a8bd4aa712e861da5295779681b441e00616d9437f35d2ee7c57f56c698dc175e151a12a098df09fbff021d66c817069f9a1eff
- SSDEEP 384:MR+tRQ28tHOyDAmb+lh9woQAWRwuXkMhw1x:MItRQZOKb+lh9wfAWBwz
- MD5 SHA1 SHA512 SSDEEP
Fake-QR-Logger-main/main.py
- SHA256 a6582b1399d8fb1c6eee445963f8c7a043b0aef0ba591e95584f82356439c1cc
- MD5 14bee44098e0b454c95227d667773651
- SHA1 e5cfd74ad4f460d2aede494ba2e277f1590b9575
- SHA512 b21677010862b65c4a7bec1167d66751ae90741f89a84ec995ad1192c4500d2f03722302995574730e3410a4877a84a2ee1eb07967b7f69be73d97a42efe137c
- SSDEEP 384:N3QieC3BKvQfGc6v3+PbRk/4dbGH9cMXGyMDJOYiqOO:N3QjIB9fGce+PS/4dbGiMXGyMDJOXo
- MD5 SHA1 SHA512 SSDEEP
Fake-QR-Logger-main/proxies.txt
- SHA256 de9b59c06e9e908767cdd74d99e426735210b363a6c1efe603b8d4ceec9035e8
- MD5 9f6b348467ed30cbaf9c0e7a515c3e0b
- SHA1 c47f15a96153322fb71b63afec6f287c0fe52936
- SHA512 a8efb36ceade09186a684492204342783720bd621818bafc7404a1a45c2aeba880fa9878eec8b7150220ac017caab77ee0cd8450e13524321d421ba658ce7ac3
- MD5 SHA1 SHA512
Fake-QR-Logger-main/requirements.txt
- SHA256 615040b3068a4317758a5b1f6840577180546472d56ce927fe14a4c560120351
- MD5 53ec5000694aa4c20fce0e219fa918c4
- SHA1 6ad2d6f4f30d741b7c15f46bc96cd6164d92d0ba
- SHA512 32d8a4885b4b66f594534cfe740effc51c266c640af1be5fe8775b7a81b9aaadeb9c2961ab842f4e3e13c0f55762f4ce9bc4153e9dc8cf288f2deda1d187852d
- MD5 SHA1 SHA512
Fake-QR-Logger-main/setup.bat
- SHA256 318f066546c69ae4745f2377a47e1ff3616a88195cce98501002140bf1bb0bae
- MD5 429c77a0a05d094ce44df2516114ebc1
- SHA1 9b4695510ae981b9a08fb4a4eb738194db74d507
- SHA512 71c89f5e846612e6365294022e2a26817b6633004656c5997fb34f0a48294fef574354476156ffe05a25a89a02b967c0cea8a17d9034db90756728c70602031f
- MD5 SHA1 SHA512