todo_2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

todo_2.exe
Size

55KB
MD5

72d86d047d2906a5d18aa4a91f6891e7
SHA1

98fd483f22700deb7d4948376f2f71541a2bb3b9
SHA256

d57203e104e5c20051fa89ab0cc7a71ed57151c7213460385ca94165ae29e8c7
SHA512

0856c434cd849f257e0adfd9ebb71f63ea427c2d23c91b1b516dc6cd2c4a689be7999e0022adc7dae49cccc622d8549cdf878ebf6af564e09a4cf4d044189a1f
SSDEEP

1536:lATAtAYQoZDmmxuMXpo4xQJiW5gdQWKDT5:l7tAYQoSwQJiW5gdQ3T5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
todo_2.exe

Files

todo_2.exe
.exe windows:4 windows x64 arch:x64

717a7f04b777684c6fdd0bc0286140c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

qt6core

_Z26qt_QMetaEnum_debugOperatorR6QDebugxPK11QMetaObjectPKc
_Z9qBadAllocv
_ZN10QArrayData19reallocateUnalignedEPS_PvxxNS_16AllocationOptionE
_ZN10QArrayData8allocateEPPS_xxxNS_16AllocationOptionE
_ZN10QByteArray11reallocDataExN10QArrayData16AllocationOptionE
_ZN10QByteArray6appendERKS_
_ZN10QByteArray6insertEx14QByteArrayView
_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE
_ZN10QEventLoop4quitEv
_ZN10QEventLoopC1EP7QObject
_ZN10QEventLoopD1Ev
_ZN10QJsonArray6appendERK10QJsonValue
_ZN10QJsonArrayC1Ev
_ZN10QJsonArrayD1Ev
_ZN10QJsonValueC1ERK10QJsonArray
_ZN10QJsonValueC1ERK11QJsonObject
_ZN10QJsonValueC1ERK7QString
_ZN10QJsonValueC1Eb
_ZN10QJsonValueD1Ev
_ZN11QDataStreamlsEi
_ZN11QDataStreamrsERi
_ZN11QFileDevice5closeEv
_ZN11QJsonObjectC1Ev
_ZN11QJsonObjectD1Ev
_ZN11QJsonObjectixERK7QString
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QTextStream7readAllEv
_ZN11QTextStreamC1EP9QIODevice
_ZN11QTextStreamD1Ev
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEc
_ZN13QJsonDocument8fromJsonERK10QByteArrayP15QJsonParseError
_ZN13QJsonDocumentC1ERK10QJsonArray
_ZN13QJsonDocumentD1Ev
_ZN13QJsonValueRefaSERK10QJsonValue
_ZN16QCoreApplication11aboutToQuitENS_14QPrivateSignalE
_ZN16QCoreApplication16staticMetaObjectE
_ZN16QCoreApplication4selfE
_ZN18QJsonValueConstRef12concreteBoolES_b
_ZN18QJsonValueConstRef14concreteStringES_RK7QString
_ZN2Qt16staticMetaObjectE
_ZN4QUrl17toPercentEncodingERK7QStringRK10QByteArrayS5_
_ZN4QUrlC1ERK7QStringNS_11ParsingModeE
_ZN4QUrlD1Ev
_ZN5QFile4openE6QFlagsIN13QIODeviceBase12OpenModeFlagEE
_ZN5QFileC1ERK7QString
_ZN5QFileD1Ev
_ZN6QDebug9putStringEPK5QChary
_ZN6QDebugD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11deleteLaterEv
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QString14trimmed_helperERS_
_ZN7QString6_emptyE
_ZN7QString8fromUtf8E14QByteArrayView
_ZN8QVariantC1ERK7QString
_ZN8QVariantC1Ei
_ZN8QVariantD1Ev
_ZN9QIODevice5writeERK10QByteArray
_ZN9QIODevice7readAllEv
_ZN9QMetaType14registerHelperEPKN9QtPrivate18QMetaTypeInterfaceE
_ZN9QMetaType25registerNormalizedTypedefERK10QByteArrayS_
_ZN9QMetaType7convertES_PKvS_Pv
_ZNK10QJsonArray2atEx
_ZNK10QJsonArray4sizeEv
_ZNK10QJsonValue8toObjectEv
_ZNK11QMetaObject4castEPK7QObject
_ZNK11QMetaObject9classNameEv
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK13QJsonDocument5arrayEv
_ZNK13QJsonDocument6toJsonENS_10JsonFormatE
_ZNK13QJsonValueRef7toArrayEv
_ZNK14QMessageLogger5debugEv
_ZNK7QObject6senderEv
_ZNK7QString3argExii5QChar
_ZNK8QVariant8metaTypeEv
_ZNK8QVariant8toStringEv
_ZNK9QIODevice11errorStringEv
_Zls6QDebugRK6QPoint
_ZlsR11QDataStreamRK6QPoint
_ZrsR11QDataStreamR6QPoint
qt_version_tag_6_8

qt6gui

_ZN5QFont12setPointSizeEi
_ZN5QFont16staticMetaObjectE
_ZN5QFontC1ERKS_
_ZN5QFontC1Ev
_ZN5QFontD1Ev
_ZN7QAction16staticMetaObjectE
_ZN7QAction9triggeredEb
_ZN7QActionC1ERK7QStringP7QObject
_ZNK5QFontcv8QVariantEv
_ZNK5QFonteqERKS_
_ZNK5QFontltERKS_
_Zls6QDebugRK5QFont
_ZlsR11QDataStreamRK5QFont
_ZrsR11QDataStreamR5QFont

qt6network

_ZN13QNetworkReply16staticMetaObjectE
_ZN13QNetworkReply8finishedEv
_ZN15QNetworkRequest6setUrlERK4QUrl
_ZN15QNetworkRequest9setHeaderENS_12KnownHeadersERK8QVariant
_ZN15QNetworkRequestC1ERK4QUrl
_ZN15QNetworkRequestC1Ev
_ZN15QNetworkRequestD1Ev
_ZN21QNetworkAccessManager16staticMetaObjectE
_ZN21QNetworkAccessManager3getERK15QNetworkRequest
_ZN21QNetworkAccessManager4postERK15QNetworkRequestRK10QByteArray
_ZN21QNetworkAccessManager8finishedEP13QNetworkReply
_ZN21QNetworkAccessManagerC1EP7QObject
_ZN21QNetworkAccessManagerD1Ev
_ZNK13QNetworkReply5errorEv

qt6widgets

_ZN10QBoxLayout9addLayoutEP7QLayouti
_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE
_ZN10QTabWidget10setTabTextEiRK7QString
_ZN10QTabWidget6addTabEP7QWidgetRK7QString
_ZN10QTabWidget9removeTabEi
_ZN10QTabWidgetC1EP7QWidget
_ZN11QHBoxLayoutC1Ev
_ZN11QListWidget16staticMetaObjectE
_ZN11QListWidget8takeItemEi
_ZN11QListWidgetC1EP7QWidget
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QPushButtonC1ERK7QStringP7QWidget
_ZN11QVBoxLayoutC1EP7QWidget
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN12QInputDialog7getTextEP7QWidgetRK7QStringS4_N9QLineEdit8EchoModeES4_Pb6QFlagsIN2Qt10WindowTypeEES8_INS9_15InputMethodHintEE
_ZN15QAbstractButton16staticMetaObjectE
_ZN15QAbstractButton7clickedEb
_ZN15QListWidgetItem8setFlagsE6QFlagsIN2Qt8ItemFlagEE
_ZN15QListWidgetItemC1ERK7QStringP11QListWidgeti
_ZN5QMenu4execERK6QPointP7QAction
_ZN5QMenuC1EP7QWidget
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP11QEnterEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPx
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget12setFixedSizeERK5QSize
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget16staticMetaObjectE
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget20setContextMenuPolicyEN2Qt17ContextMenuPolicyE
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget26customContextMenuRequestedERK6QPoint
_ZN7QWidget4showEv
_ZN7QWidget5closeEv
_ZN7QWidget9addActionEP7QAction
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9setLayoutEP7QLayout
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN9QLineEdit18setPlaceholderTextERK7QString
_ZN9QLineEditC1EP7QWidget
_ZNK10QTabWidget12currentIndexEv
_ZNK10QTabWidget13currentWidgetEv
_ZNK10QTabWidget5countEv
_ZNK10QTabWidget7indexOfEPK7QWidget
_ZNK10QTabWidget7tabTextEi
_ZNK11QListWidget10currentRowEv
_ZNK11QListWidget4itemEi
_ZNK11QListWidget5countEv
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11mapToGlobalERK6QPoint
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK9QLineEdit4textEv
_ZThn16_NK7QWidget10redirectedEP6QPoint
_ZThn16_NK7QWidget11initPainterEP8QPainter
_ZThn16_NK7QWidget11paintEngineEv
_ZThn16_NK7QWidget13sharedPainterEv
_ZThn16_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn16_NK7QWidget7devTypeEv

libgcc_s_seh-1

_Unwind_Resume

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetLastError
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LocalFree
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_fmode
_initterm
_ismbblead
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcmp
memcpy
memmove
signal
strcmp
strlen
strncmp
vfprintf

shell32

CommandLineToArgvW

libstdc++-6

_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPvy
_Znay
_Znwy
__cxa_throw_bad_array_new_length
__gxx_personality_seh0

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtversi
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 384B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

717a7f04b777684c6fdd0bc0286140c5

Headers

DLL Characteristics

File Characteristics

Imports

qt6core

qt6gui

qt6network

qt6widgets

libgcc_s_seh-1

kernel32

msvcrt

shell32

libstdc++-6

Sections

.text Size: 28KB - Virtual size: 27KB

.data Size: 1024B - Virtual size: 560B

.rdata Size: 4KB - Virtual size: 4KB

.qtversi Size: 512B - Virtual size: 16B

.pdata Size: 1KB - Virtual size: 1KB

.xdata Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 384B

.idata Size: 15KB - Virtual size: 14KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 396B

.text
Size: 28KB - Virtual size: 27KB

.data
Size: 1024B - Virtual size: 560B

.rdata
Size: 4KB - Virtual size: 4KB

.qtversi
Size: 512B - Virtual size: 16B

.pdata
Size: 1KB - Virtual size: 1KB

.xdata
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 384B

.idata
Size: 15KB - Virtual size: 14KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 396B