tmp | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

tmp
Size

626KB
MD5

980dae2b507c385923fc6210e518db2b
SHA1

cc84253cc1e4b0a1880900b9106a7c6b44bb84d9
SHA256

3728070d2d1e88a6776f3460abe79d3d09db9dae3ab154515b0d1850223dc784
SHA512

ec2345e9d33b10178b4000babe83961164b6e3f1ca12483f2108b5e6584e2a857f92e9c02228a589efb5b49255cfb6c638d388a5d0c18b87617bfa10832a372c
SSDEEP

12288:CFvLW1PIEEKUohL6O/VB/Pqo9Qh7AIcCkXvm5Utytvjddq2ORf+b+Lkbxv:CrKzLR/VBnWcnEUUNdIRGb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x64 arch:x64

fc18e137ace4694b190219dd914d33ec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

qt6core

_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_Z9qBadAllocv
_ZN10QArrayData10deallocateEPS_xx
_ZN10QArrayData19reallocateUnalignedEPS_PvxxNS_16AllocationOptionE
_ZN10QArrayData8allocateEPPS_xxxNS_16AllocationOptionE
_ZN10QByteArray6_emptyE
_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE
_ZN10QEventLoop4quitEv
_ZN10QEventLoopC1EP7QObject
_ZN10QEventLoopD1Ev
_ZN10QJsonValueC1ERK7QString
_ZN10QJsonValueD1Ev
_ZN11QDataStreamlsEi
_ZN11QDataStreamrsERi
_ZN11QFileDevice5closeEv
_ZN11QFileDevice5flushEv
_ZN11QJsonObjectC1Ev
_ZN11QJsonObjectD1Ev
_ZN11QJsonObjectixERK7QString
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QTextStreamlsEc
_ZN11QTextStreamlsEi
_ZN11QTranslator4loadERK7QStringS2_S2_S2_
_ZN11QTranslatorC1EP7QObject
_ZN11QTranslatorD1Ev
_ZN12QDirIterator4nextEv
_ZN12QDirIteratorC1ERK7QStringRK5QListIS0_E6QFlagsIN4QDir6FilterEES7_INS_12IteratorFlagEE
_ZN12QDirIteratorD1Ev
_ZN13QJsonDocument8fromJsonERK10QByteArrayP15QJsonParseError
_ZN13QJsonDocumentC1ERK11QJsonObject
_ZN13QJsonDocumentD1Ev
_ZN13QJsonValueRefaSERK10QJsonValue
_ZN16QCoreApplication13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE
_ZN16QCoreApplication17installTranslatorEP11QTranslator
_ZN16QCoreApplication19applicationFilePathEv
_ZN16QCoreApplication4quitEv
_ZN16QCoreApplication9translateEPKcS1_S1_i
_ZN18QCryptographicHash5resetEv
_ZN18QCryptographicHash7addDataEP9QIODevice
_ZN18QCryptographicHashC1ENS_9AlgorithmE
_ZN18QCryptographicHashD1Ev
_ZN19QProcessEnvironment17systemEnvironmentEv
_ZN19QProcessEnvironmentD1Ev
_ZN4QDir8rootPathEv
_ZN4QDirC1ERK7QString
_ZN4QDirD1Ev
_ZN4QUrlC1ERK7QStringNS_11ParsingModeE
_ZN4QUrlD1Ev
_ZN5QFile4openE6QFlagsIN13QIODeviceBase12OpenModeFlagEE
_ZN5QFile6removeEv
_ZN5QFile6renameERK7QString
_ZN5QFileC1ERK7QString
_ZN5QFileD1Ev
_ZN6QDebug9putStringEPK5QChary
_ZN6QDebugD1Ev
_ZN6QTimer14singleShotImplEiN2Qt9TimerTypeEPK7QObjectPN9QtPrivate15QSlotObjectBaseE
_ZN7QLocale6systemEv
_ZN7QLocaleD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11deleteLaterEv
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QString17toIntegral_helperE11QStringViewPbi
_ZN7QString6_emptyE
_ZN7QString6appendERKS_
_ZN7QString6numberEii
_ZN7QString6numberExi
_ZN7QString6removeExx
_ZN7QString8fromUtf8E14QByteArrayView
_ZN7QStringC1EPK5QCharx
_ZN7QStringaSERKS_
_ZN8QProcess13startDetachedERK7QStringRK5QListIS0_ES2_Px
_ZN8QProcessC1EP7QObject
_ZN8QProcessD1Ev
_ZN8QVariantC1ERK7QString
_ZN8QVariantD1Ev
_ZN9QFileInfoC1ERK7QString
_ZN9QFileInfoD1Ev
_ZN9QIODevice5writeERK10QByteArray
_ZN9QIODevice7readAllEv
_ZN9QtPrivate14compareStringsE11QStringViewS0_N2Qt15CaseSensitivityE
_ZNK10QByteArray5toHexEc
_ZNK10QByteArray6isNullEv
_ZNK10QJsonValue4typeEv
_ZNK10QJsonValue8toStringEv
_ZNK10QJsonValueixERK7QString
_ZNK11QJsonObject4keysEv
_ZNK11QJsonObject5valueERK7QString
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK12QDirIterator7hasNextEv
_ZNK13QJsonDocument6objectEv
_ZNK13QJsonDocument6toJsonENS_10JsonFormatE
_ZNK13QJsonDocumentixERK7QString
_ZNK14QMessageLogger5debugEv
_ZNK18QCryptographicHash6resultEv
_ZNK19QProcessEnvironment5valueERK7QStringS2_
_ZNK4QDir12absolutePathEv
_ZNK4QDir5mkdirERK7QString
_ZNK4QDir6existsERK7QString
_ZNK4QDir6existsEv
_ZNK4QDir6mkpathERK7QString
_ZNK5QFile6existsEv
_ZNK7QLocale11uiLanguagesEv
_ZNK7QObject10objectNameEv
_ZNK7QString7compareERKS_N2Qt15CaseSensitivityE
_ZNK7QString7indexOfERKS_xN2Qt15CaseSensitivityE
_ZNK9QFileInfo11absoluteDirEv
_ZNK9QFileInfo12absolutePathEv
_ZlsR11QDataStreamRK7QString
_ZrsR11QDataStreamR7QString

qt6gui

_ZN13QIntValidatorC1EP7QObject
_ZN5QFont9setWeightENS_6WeightE
_ZN5QFontC1Ev
_ZN5QFontD1Ev
_ZN5QIcon7addFileERK7QStringRK5QSizeNS_4ModeENS_5StateE
_ZN5QIconC1Ev
_ZN5QIconD1Ev
_ZN7QCursorC1EN2Qt11CursorShapeE
_ZN7QCursorD1Ev
_ZN7QPixmapC1ERK7QStringPKc6QFlagsIN2Qt19ImageConversionFlagEE
_ZN7QPixmapD1Ev
_ZNK5QFontcv8QVariantEv
_ZNK5QIconcv8QVariantEv

qt6network

_ZN13QNetworkReply16staticMetaObjectE
_ZN13QNetworkReply8finishedEv
_ZN15QNetworkRequest9setHeaderENS_12KnownHeadersERK8QVariant
_ZN15QNetworkRequestC1ERK4QUrl
_ZN15QNetworkRequestD1Ev
_ZN21QNetworkAccessManager3getERK15QNetworkRequest
_ZN21QNetworkAccessManager4postERK15QNetworkRequestRK10QByteArray
_ZN21QNetworkAccessManagerC1EP7QObject
_ZNK13QNetworkReply5errorEv

qt6widgets

_ZN11QFileDialog20getExistingDirectoryEP7QWidgetRK7QStringS4_6QFlagsINS_6OptionEE
_ZN11QListWidget13setCurrentRowEi
_ZN11QListWidget17setSortingEnabledEb
_ZN11QListWidgetC1EP7QWidget
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QPushButtonC1EP7QWidget
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN14QStackedWidget15setCurrentIndexEi
_ZN14QStackedWidget9addWidgetEP7QWidget
_ZN14QStackedWidgetC1EP7QWidget
_ZN15QAbstractButton10setCheckedEb
_ZN15QAbstractButton11setIconSizeERK5QSize
_ZN15QAbstractButton7setIconERK5QIcon
_ZN15QAbstractButton7setTextERK7QString
_ZN15QAbstractSlider14setOrientationEN2Qt11OrientationE
_ZN15QListWidgetItem7setDataEiRK8QVariant
_ZN15QListWidgetItemC1EP11QListWidgeti
_ZN17QAbstractItemView11setIconSizeERK5QSize
_ZN17QAbstractItemView14clearSelectionEv
_ZN6QLabel11setWordWrapEb
_ZN6QLabel12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE
_ZN6QLabel17setScaledContentsEb
_ZN6QLabel20setOpenExternalLinksEb
_ZN6QLabel7setTextERK7QString
_ZN6QLabel9setPixmapERK7QPixmap
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QSliderC1EP7QWidget
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP11QEnterEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setEnabledEb
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPx
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11setDisabledEb
_ZN7QWidget11setGeometryERK5QRect
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13setStyleSheetERK7QString
_ZN7QWidget13setWindowFlagEN2Qt10WindowTypeEb
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setFocusPolicyEN2Qt11FocusPolicyE
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget4showEv
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget7setFontERK5QFont
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9setCursorERK7QCursor
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN9QCheckBoxC1EP7QWidget
_ZN9QLineEdit11setEchoModeENS_8EchoModeE
_ZN9QLineEdit11setReadOnlyEb
_ZN9QLineEdit12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE
_ZN9QLineEdit12setInputMaskERK7QString
_ZN9QLineEdit12setMaxLengthEi
_ZN9QLineEdit12setValidatorEPK10QValidator
_ZN9QLineEdit18setPlaceholderTextERK7QString
_ZN9QLineEdit7setTextERK7QString
_ZN9QLineEditC1EP7QWidget
_ZNK11QListWidget16isSortingEnabledEv
_ZNK11QListWidget4itemEi
_ZNK15QAbstractButton9isCheckedEv
_ZNK6QLabel4textEv
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK9QLineEdit4textEv
_ZThn16_NK7QWidget10redirectedEP6QPoint
_ZThn16_NK7QWidget11initPainterEP8QPainter
_ZThn16_NK7QWidget11paintEngineEv
_ZThn16_NK7QWidget13sharedPainterEv
_ZThn16_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn16_NK7QWidget7devTypeEv

libgcc_s_seh-1

_Unwind_Resume

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetLastError
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LocalFree
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memmove
signal
strcmp
strlen
strncmp
vfprintf

shell32

CommandLineToArgvW

libstdc++-6

_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPvy
_Znay
_Znwy
__cxa_throw_bad_array_new_length
__gxx_personality_seh0

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 539KB - Virtual size: 538KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 384B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc18e137ace4694b190219dd914d33ec

Headers

DLL Characteristics

File Characteristics

Imports

qt6core

qt6gui

qt6network

qt6widgets

libgcc_s_seh-1

kernel32

msvcrt

shell32

libstdc++-6

Sections

.text Size: 59KB - Virtual size: 58KB

.data Size: 1024B - Virtual size: 704B

.rdata Size: 539KB - Virtual size: 538KB

.pdata Size: 1KB - Virtual size: 1KB

.xdata Size: 5KB - Virtual size: 5KB

.bss Size: - Virtual size: 384B

.idata Size: 16KB - Virtual size: 16KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 592B

.reloc Size: 512B - Virtual size: 380B

.text
Size: 59KB - Virtual size: 58KB

.data
Size: 1024B - Virtual size: 704B

.rdata
Size: 539KB - Virtual size: 538KB

.pdata
Size: 1KB - Virtual size: 1KB

.xdata
Size: 5KB - Virtual size: 5KB

.bss
Size: - Virtual size: 384B

.idata
Size: 16KB - Virtual size: 16KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 592B

.reloc
Size: 512B - Virtual size: 380B