8d12c5102e05520c10131600b2280680dfe6c095554d34e0d30b698a9058a939

Sharing

Copy URL Twitter E-mail

General

Target

8d12c5102e05520c10131600b2280680dfe6c095554d34e0d30b698a9058a939
Size

1.0MB
MD5

ba7f62f9eedab5e03fee073c16686ea1
SHA1

a3bf302d7d7789247ac4456fc0a73e57f49b8612
SHA256

8d12c5102e05520c10131600b2280680dfe6c095554d34e0d30b698a9058a939
SHA512

9b7f51069832a43bf1efd670f67a8ca3661099e8021a89f4c9ecf904680bd5e21576ac48f53d002640afac26ff474645d9a109ed162b90848819b0ae9b1f5d32
SSDEEP

12288:1d18DjL/9Djrn1DjaBUEI8I6IUI3IYb0LNDsB7DMdQyOemR/bvHQImIeIyIAIjBE:10B/B1R+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d12c5102e05520c10131600b2280680dfe6c095554d34e0d30b698a9058a939

Files

8d12c5102e05520c10131600b2280680dfe6c095554d34e0d30b698a9058a939
.dll windows:5 windows x64 arch:x64

82196a238676c8c0165a8c512919f670

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

J:\Cut.V13.05.XX.Nightly\Build64\bin\RelWithDebInfo\Trumpf.TruTops.ViewModelResources.pdb

Imports

qt5core

?qUnregisterResourceData@@YA_NHPEBE00@Z
?qResourceFeatureZlib@@YAEXZ
?qRegisterResourceData@@YA_NHPEBE00@Z

vcruntime140

memset
__std_type_info_destroy_list
__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_initterm_e
_initterm
_execute_onexit_table
_initialize_narrow_environment
_crt_atexit
_cexit

kernel32

RtlLookupFunctionEntry
RtlVirtualUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlCaptureContext
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1021KB - Virtual size: 1020KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82196a238676c8c0165a8c512919f670

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

qt5core

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1021KB - Virtual size: 1020KB

.data Size: 512B - Virtual size: 216B

.pdata Size: 512B - Virtual size: 444B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 44B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1021KB - Virtual size: 1020KB

.data
Size: 512B - Virtual size: 216B

.pdata
Size: 512B - Virtual size: 444B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 44B