0c951b74a59b54274e144c015afe03bdfec2b0b9cf12680cab9f832c3f526f83

Sharing

Copy URL Twitter E-mail

General

Target

0c951b74a59b54274e144c015afe03bdfec2b0b9cf12680cab9f832c3f526f83
Size

2.9MB
MD5

3085d42d391891ff86839b11deeddf9f
SHA1

18f59c59f87fc0c2beda38eb86205211ca1e7f17
SHA256

0c951b74a59b54274e144c015afe03bdfec2b0b9cf12680cab9f832c3f526f83
SHA512

44d97192482be30e80c2fecbc72e4b6da9962575d1c54d3f8c7cf0e13102d8af6789dfef99cbcfa8de0aae457d843e7a63c04b0adf3f94cf580b9ff2c9042ece
SSDEEP

49152:tuHk+fx35HMY7CTmAt/slB1lklkSELYVT6WYjlzVp:tub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c951b74a59b54274e144c015afe03bdfec2b0b9cf12680cab9f832c3f526f83

Files

0c951b74a59b54274e144c015afe03bdfec2b0b9cf12680cab9f832c3f526f83
.exe windows:4 windows x86 arch:x86

58b2e07a85886933ba8c4bfaaee49c5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
CreateSemaphoreA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetCommandLineW
GetLastError
GetModuleHandleA
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject

mingwm10

__mingwthr_key_dtor

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memchr
memcpy
memmove
memset
signal
strcmp
strlen

qtcored4

_Z11qt_assert_xPKcS0_S0_i
_Z13qFlagLocationPKc
_Z5qFreePv
_Z7qMallocj
_Z7qMemSetPvij
_Z8qReallocPvj
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_Z9qt_assertPKcS0_i
_ZN10QByteArray11shared_nullE
_ZN10QByteArray7reallocEi
_ZN10QByteArrayaSEPKc
_ZN10QByteArrayaSERKS_
_ZN11QDataStreamC1EP9QIODevice
_ZN11QDataStreamD1Ev
_ZN11QDataStreamrsERs
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QVectorData6mallocEiiiPS_
_ZN14QWaitCondition4waitEP6QMutexm
_ZN14QWaitCondition7wakeOneEv
_ZN14QWaitConditionC1Ev
_ZN14QWaitConditionD1Ev
_ZN6QMutex4lockEv
_ZN6QMutex6unlockEv
_ZN6QMutexC1ENS_13RecursionModeE
_ZN6QMutexD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyEPKc
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QString11shared_nullE
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString9fromUtf16EPKti
_ZN7QStringaSERKS_
_ZN7QThread11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QThread11qt_metacastEPKc
_ZN7QThread16staticMetaObjectE
_ZN7QThread4waitEm
_ZN7QThread5startENS_8PriorityE
_ZN7QThreadC2EP7QObject
_ZN7QThreadD2Ev
_ZN8QSysInfo14windowsVersionEv
_ZNK11QMetaObject2trEPKcS1_
_ZNK7QString11toLocal8BitEv
_ZNK7QString3argERKS_iRK5QChar
_ZNK7QString5toIntEPbi
_ZNK7QStringeqERKS_
_ZNK7QThread9isRunningEv
_ZNK9QIODevice11errorStringEv
_ZrsR11QDataStreamR7QString

qtguid4

_ZN11QGridLayout9addWidgetEP7QWidgetii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayout9addWidgetEP7QWidgetiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayoutC1Ev
_ZN11QMessageBox11informationEP7QWidgetRK7QStringS4_6QFlagsINS_14StandardButtonEES6_
_ZN11QPushButton10setDefaultEb
_ZN11QPushButtonC1ERK7QStringP7QWidget
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN13QIntValidatorC1EiiP7QObject
_ZN16QDialogButtonBox9addButtonEP15QAbstractButtonNS_10ButtonRoleE
_ZN16QDialogButtonBoxC1EP7QWidget
_ZN6QLabel7setTextERK7QString
_ZN6QLabel8setBuddyEP7QWidget
_ZN6QLabelC1ERK7QStringP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QDialog10closeEventEP11QCloseEvent
_ZN7QDialog10setVisibleEb
_ZN7QDialog11eventFilterEP7QObjectP6QEvent
_ZN7QDialog11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QDialog11qt_metacastEPKc
_ZN7QDialog11resizeEventEP12QResizeEvent
_ZN7QDialog13keyPressEventEP9QKeyEvent
_ZN7QDialog16contextMenuEventEP17QContextMenuEvent
_ZN7QDialog16staticMetaObjectE
_ZN7QDialog4doneEi
_ZN7QDialog4execEv
_ZN7QDialog6acceptEv
_ZN7QDialog6rejectEv
_ZN7QDialog9showEventEP10QShowEvent
_ZN7QDialogC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QDialogD2Ev
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10fontChangeERK5QFont
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setEnabledEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11styleChangeER6QStyle
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13enabledChangeEb
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13paletteChangeERK8QPalette
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14languageChangeEv
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget22windowActivationChangeEb
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget8setFocusEN2Qt11FocusReasonE
_ZN7QWidget8winEventEP6tagMSGPl
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9setLayoutEP7QLayout
_ZN9QLineEdit12setValidatorEPK10QValidator
_ZN9QLineEditC1EP7QWidget
_ZN9QLineEditC1ERK7QStringP7QWidget
_ZNK7QDialog15minimumSizeHintEv
_ZNK7QDialog8sizeHintEv
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget5getDCEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget9releaseDCEP5HDC__
_ZNK9QLineEdit4textEv
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget5getDCEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
_ZThn8_NK7QWidget9releaseDCEP5HDC__

qtnetworkd4

_ZN10QTcpSocketC1EP7QObject
_ZN10QTcpSocketD1Ev
_ZN15QAbstractSocket13connectToHostERK7QStringt6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN15QAbstractSocket16waitForConnectedEi
_ZN15QAbstractSocket16waitForReadyReadEi
_ZNK15QAbstractSocket14bytesAvailableEv
_ZNK15QAbstractSocket5errorEv

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

58b2e07a85886933ba8c4bfaaee49c5d

Headers

File Characteristics

Imports

kernel32

mingwm10

msvcrt

qtcored4

qtguid4

qtnetworkd4

Sections

.text Size: 65KB - Virtual size: 64KB

.data Size: 512B - Virtual size: 160B

.rdata Size: 4KB - Virtual size: 4KB

.bss Size: - Virtual size: 16KB

.idata Size: 8KB - Virtual size: 8KB

.stab Size: 113KB - Virtual size: 113KB

.stabstr Size: 2.6MB - Virtual size: 2.6MB

.text
Size: 65KB - Virtual size: 64KB

.data
Size: 512B - Virtual size: 160B

.rdata
Size: 4KB - Virtual size: 4KB

.bss
Size: - Virtual size: 16KB

.idata
Size: 8KB - Virtual size: 8KB

.stab
Size: 113KB - Virtual size: 113KB

.stabstr
Size: 2.6MB - Virtual size: 2.6MB