General

  • Target

    Dark Spy.rar

  • Size

    40.8MB

  • MD5

    2ed4e2c162661e25033b41da22ceea2c

  • SHA1

    f527f93df9426f6f08b4c8da04847565e1dee4fe

  • SHA256

    4ac460e41858c19e256170d6fa6a0775fd20cbe8314c1f12c86f2b3785163dde

  • SHA512

    f2d562009cbafebc3fcb6aae25ee1c427b9d913fd35e910a4eebe31a7d9930d2ca71598260e334b375c1d62f48504a45c812854adac845e8357de3a157e61c1b

  • SSDEEP

    786432:jBTr7sbLi3SpVEXq+3fuL8zH013tLm5aJnSmKDT:jBzsb2KW7fuL8zH013tLc+nSm8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • Dark Spy.rar
    .rar

    Password: Ze1ng

  • Dark Spy/Dark Spy.exe
    .exe windows:4 windows x86 arch:x86

    Password: Ze1ng

    e7d857a6b1d7de1b6c756d2d381fe554


    Headers

    Imports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/iconengines/qsvgicon.dll
  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qgif.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    5fd27c15059ed7d25ce61b5068776b9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qicns.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    e9072e2a0e32154032ac95db134bc344


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qico.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    b127d2b5eb2d64741e8cf3a684f53083


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qjpeg.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    0ee7f60098b60d828daa90a658ce1e89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qsvg.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    99e575340214e1344b829f73fc103448


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qtga.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    5d2534ece75e4b6d48b90a3a5ab461ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qtiff.dll
    .dll windows:6 windows x86 arch:x86

    Password: Ze1ng

    2388c0b64a24970ee09483c444670343


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qwbmp.dll
    .dll windows:6 windows x86 arch:x86

    cb222c05c5fe195a9fc1087938b86d12


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qwebp.dll
    .dll windows:6 windows x86 arch:x86

    92b10182dd96972184b6f43d0e7f28dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qminimal.dll
    .dll windows:6 windows x86 arch:x86

    74aa4d54a4cfe559c9bdbd3b3a5f40d1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qoffscreen.dll
    .dll windows:6 windows x86 arch:x86

    5c6391e49087f7f6893ad18471bd87ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qwebgl.dll
    .dll windows:6 windows x86 arch:x86

    ab5da60f88dfab52361d150fb0d5b1a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    29ed2e73839186c2a3b5a58cddc0eb48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/platformthemes/qxdgdesktopportal.dll
    .dll windows:6 windows x86 arch:x86

    b14e90cd5ac3b42e54f7034e1c6bf066


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/plugins/styles/qwindowsvistastyle.dll
    .dll windows:6 windows x86 arch:x86

    0404caa26e442821bc38f28b50ba0493


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_ar.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_bg.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_ca.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_cs.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_da.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_de.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_en.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_es.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_fi.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_fr.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_gd.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_he.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_hu.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_it.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_ja.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_ko.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_lv.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_pl.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_ru.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_sk.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_tr.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_uk.qm
  • Dark Spy/Engine/Qt5/Qt5/translations/qtbase_zh_TW.qm
  • Dark Spy/Engine/Qt5/QtCore.pyd
  • Dark Spy/Engine/Qt5/QtGui.pyd
    .dll windows:6 windows x86 arch:x86

    626ae68e2c92aadb095ec8822c4e1a17


    Headers

    Imports

    Exports

    Sections

  • Dark Spy/Engine/Qt5/QtWidgets.pyd
  • Dark Spy/Engine/Qt5/sip.cp36-win32.pyd
  • Dark Spy/Engine/Qt5Core.dll
  • Dark Spy/Engine/Qt5Widgets.dll
  • Dark Spy/Engine/api-ms-win-crt-math-l1-1-0.dll
  • Dark Spy/Engine/bin/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/bin/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/bin/msvcp120.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/bin/msvcr120.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/bin/opengl32sw.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/bin/ssleay32.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/concrt140.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • Dark Spy/Engine/msvcp120.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/msvcp140.dll
  • Dark Spy/Engine/msvcp140_1.dll
  • Dark Spy/Engine/msvcr120.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/opengl32sw.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/ssleay32.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/Engine/turbojpeg.dll
    .dll windows:5 windows x64 arch:x64


    Headers

    Sections

  • Dark Spy/Engine/ucrtbase.dll
  • Dark Spy/GameOverlay.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Dark Spy/config/WindowsEngine.ini
  • Dark Spy/config/cfg.ini
  • Dark Spy/info.txt