6139eeabbd48292c4f32e6ab198dc53004ff433b238aaa67a855d35de2379584

Sharing

Copy URL

Twitter E-mail

General

Target

6139eeabbd48292c4f32e6ab198dc53004ff433b238aaa67a855d35de2379584
Size

69KB
MD5

88b45344fcdbb1ee73643068e8487861
SHA1

dd1d9bd01d23ec7214a231bbbf926f9921dd8b7f
SHA256

6139eeabbd48292c4f32e6ab198dc53004ff433b238aaa67a855d35de2379584
SHA512

e3b6439a5acfc8ac3b79001177ac523e16639a5829fc2b523fd78b8e7307a830e0940ca4d60db3ef06fad81213089a8094dca8d0fa3eca681d5d4d8131d4b307
SSDEEP

1536:WZO3zAJbNjksUEY5SyQP23kbYK/YCtaef6tiizJtK:oODsBjksUEY5Y2xK/YCtaef6tiizJtK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6139eeabbd48292c4f32e6ab198dc53004ff433b238aaa67a855d35de2379584

Files

6139eeabbd48292c4f32e6ab198dc53004ff433b238aaa67a855d35de2379584
.dll windows:4 windows x64 arch:x64

b13f225dceedb34365d1569bc9230b19

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

qt5core

_ZN10QArrayData10deallocateEPS_yy
_ZN10QArrayData11shared_nullE
_ZN10QArrayData8allocateEyyy6QFlagsINS_16AllocationOptionEE
_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE
_ZN10QByteArray8truncateEi
_ZN11QDataStream9setDeviceEP9QIODevice
_ZN11QDataStreamC2Ev
_ZN11QDataStreamD2Ev
_ZN11QDataStreamlsEi
_ZN11QDataStreamlsEx
_ZN11QMetaObject10ConnectionD1Ev
_ZN15QtSharedPointer20ExternalRefCountData9getAndRefEPK7QObject
_ZN4QUrlC1ERKS_
_ZN4QUrlD1Ev
_ZN7QBuffer4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN7QBuffer6bufferEv
_ZN7QBuffer7setDataERK10QByteArray
_ZN7QBufferC1EP7QObject
_ZN7QBufferD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject5eventEP6QEvent
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN9QIODevice5resetEv
_ZN9QListData11detach_growEPii
_ZN9QListData6appendEv
_ZN9QListData7disposeEPNS_4DataE
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK4QUrl8toStringE12QUrlTwoFlagsINS_19UrlFormattingOptionENS_25ComponentFormattingOptionEE
_ZNK7QBuffer4dataEv
_ZNK7QStringeqE13QLatin1String
_ZlsR11QDataStreamRK7QString

qt5qml

_ZN18QQmlDebugConnector19s_dataStreamVersionE
_ZN27QQmlAbstractProfilerAdapter11qt_metacallEN11QMetaObject4CallEiPPv
_ZN27QQmlAbstractProfilerAdapter11qt_metacastEPKc
_ZN27QQmlAbstractProfilerAdapter13dataRequestedEv
_ZN27QQmlAbstractProfilerAdapter16profilingEnabledEy
_ZN27QQmlAbstractProfilerAdapter16staticMetaObjectE
_ZN27QQmlAbstractProfilerAdapter17profilingDisabledEv
_ZN27QQmlAbstractProfilerAdapter18referenceTimeKnownERK13QElapsedTimer
_ZN27QQmlAbstractProfilerAdapter28profilingEnabledWhileWaitingEy
_ZN27QQmlAbstractProfilerAdapter29profilingDisabledWhileWaitingEv
_ZN34QQmlAbstractProfilerAdapterFactory11qt_metacallEN11QMetaObject4CallEiPPv
_ZN34QQmlAbstractProfilerAdapterFactory11qt_metacastEPKc
_ZN34QQmlAbstractProfilerAdapterFactory16staticMetaObjectE
_ZTV27QQmlAbstractProfilerAdapter
_ZTV34QQmlAbstractProfilerAdapterFactory

qt5quick

_ZN14QQuickProfiler10initializeEP7QObject
_ZN14QQuickProfiler10s_instanceE
_ZN14QQuickProfiler14reportDataImplEv
_ZN14QQuickProfiler16staticMetaObjectE
_ZN14QQuickProfiler17stopProfilingImplEv
_ZN14QQuickProfiler18startProfilingImplEy
_ZN14QQuickProfiler8setTimerERK13QElapsedTimer
_ZN14QQuickProfiler9dataReadyERK7QVectorI18QQuickProfilerDataE

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcpy
realloc
strcmp
strlen
strncmp
vfprintf

libstdc++-6

_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdlPv
_ZdlPvy
_Znwy
__cxa_guard_acquire
__cxa_guard_release

Exports

Exports

qt_plugin_instance
qt_plugin_query_metadata

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 304B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 129B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/16
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b13f225dceedb34365d1569bc9230b19

Headers

DLL Characteristics

File Characteristics

Imports

qt5core

qt5qml

qt5quick

kernel32

msvcrt

libstdc++-6

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 256B

.rdata Size: 3KB - Virtual size: 2KB

/4 Size: 512B - Virtual size: 160B

.pdata Size: 1024B - Virtual size: 828B

.xdata Size: 1024B - Virtual size: 600B

.bss Size: - Virtual size: 304B

.edata Size: 512B - Virtual size: 129B

.idata Size: 5KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 856B

.reloc Size: 512B - Virtual size: 212B

/16 Size: 512B - Virtual size: 36B

.text
Size: 12KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 256B

.rdata
Size: 3KB - Virtual size: 2KB

/4
Size: 512B - Virtual size: 160B

.pdata
Size: 1024B - Virtual size: 828B

.xdata
Size: 1024B - Virtual size: 600B

.bss
Size: - Virtual size: 304B

.edata
Size: 512B - Virtual size: 129B

.idata
Size: 5KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 512B - Virtual size: 212B

/16
Size: 512B - Virtual size: 36B