7a4131a4936b72f4b68802d5938a2920_NEAS

Sharing

Copy URL

Twitter E-mail

General

Target

7a4131a4936b72f4b68802d5938a2920_NEAS
Size

58KB
MD5

7a4131a4936b72f4b68802d5938a2920
SHA1

b5fbac958b89f87cd086689ea8a0b19305893a14
SHA256

085b02c2cf6a6c4eb628fd8581cd81fb23f23e7f9fa0c6afb0bb3446adf1d43b
SHA512

adf7b23f9358de5036c609ccc1a4aff5de3556b482498547e73fc3a4400533dc60e87d53b25825235cdd6a3da94fc87eddf3060144a050a5efec076bac024026
SSDEEP

384:JuaS5PiaPq+yypfLKlHH2aR8DMWzfmcK3e9/urM5w04O26:H0aTRc7/uotF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a4131a4936b72f4b68802d5938a2920_NEAS

Files

7a4131a4936b72f4b68802d5938a2920_NEAS
.dll windows:6 windows x64 arch:x64

5c073ba936636a36bf7c3149f352ae1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\_\cf37092\build\bin\KIconEnginePlugin.pdb

Imports

kf6iconthemes

?read@KIconEngine@@UEAA_NAEAVQDataStream@@@Z
?clone@KIconEngine@@UEBAPEAVQIconEngine@@XZ
?key@KIconEngine@@UEBA?AVQString@@XZ
?isNull@KIconEngine@@UEAA_NXZ
?availableSizes@KIconEngine@@UEAA?AV?$QList@VQSize@@@@W4Mode@QIcon@@W4State@4@@Z
?iconName@KIconEngine@@UEAA?AVQString@@XZ
?scaledPixmap@KIconEngine@@UEAA?AVQPixmap@@AEBVQSize@@W4Mode@QIcon@@W4State@5@N@Z
?pixmap@KIconEngine@@UEAA?AVQPixmap@@AEBVQSize@@W4Mode@QIcon@@W4State@5@@Z
?paint@KIconEngine@@UEAAXPEAVQPainter@@AEBVQRect@@W4Mode@QIcon@@W4State@5@@Z
?actualSize@KIconEngine@@UEAA?AVQSize@@AEBV2@W4Mode@QIcon@@W4State@4@@Z
?global@KIconLoader@@SAPEAV1@XZ
??1KIconEngine@@UEAA@XZ
?write@KIconEngine@@UEBA_NAEAVQDataStream@@@Z
??0KIconEngine@@QEAA@AEBVQString@@PEAVKIconLoader@@@Z

qt6gui

??0QIconEnginePlugin@@QEAA@PEAVQObject@@@Z
?addPixmap@QIconEngine@@UEAAXAEBVQPixmap@@W4Mode@QIcon@@W4State@4@@Z
?addFile@QIconEngine@@UEAAXAEBVQString@@AEBVQSize@@W4Mode@QIcon@@W4State@5@@Z
?virtual_hook@QIconEngine@@UEAAXHPEAX@Z
?staticMetaObject@QIconEnginePlugin@@2UQMetaObject@@B
??1QIconEnginePlugin@@UEAA@XZ
?qt_metacall@QIconEnginePlugin@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QIconEnginePlugin@@UEAAPEAXPEBD@Z

qt6core

?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
qt_version_tag_6_7

msvcp140

?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
_Mbrtowc
?_Xbad_alloc@std@@YAXXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_destroy_list
_CxxThrowException
__current_exception_context
__current_exception
__std_exception_destroy
__std_exception_copy
__C_specific_handler
memcpy
memset

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free
calloc

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
terminate
_execute_onexit_table
_configure_narrow_argv
_seh_filter_dll
_crt_atexit
_cexit
_initterm
_crt_at_quick_exit
_initterm_e
_initialize_onexit_table
_initialize_narrow_environment

kernel32

GetCurrentThreadId
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
ReleaseSRWLockExclusive
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess

Exports

Exports

qt_plugin_instance
qt_plugin_query_metadata_v2

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtversi
Size: 512B - Virtual size: 275B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmetad
Size: 512B - Virtual size: 401B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c073ba936636a36bf7c3149f352ae1d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kf6iconthemes

qt6gui

qt6core

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 1KB - Virtual size: 3KB

.pdata Size: 2KB - Virtual size: 1KB

.idata Size: 7KB - Virtual size: 6KB

.qtversi Size: 512B - Virtual size: 275B

.qtmetad Size: 512B - Virtual size: 401B

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 373B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 548B

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 1KB - Virtual size: 3KB

.pdata
Size: 2KB - Virtual size: 1KB

.idata
Size: 7KB - Virtual size: 6KB

.qtversi
Size: 512B - Virtual size: 275B

.qtmetad
Size: 512B - Virtual size: 401B

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 373B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 548B