TqPackage8[.]dll

General

Target

TqPackage8.dll
Size

36KB
MD5

d60ddd03ae81a6412b89201052be3916
SHA1

ec8e4e9ad35175de7b7c4bdab1ab986982458d80
SHA256

1267da977cb525e47fa4276c3a98239e8ccaeb09c563e1bd993462685c22a4b2
SHA512

32d40fc53a43a0961fbf7d1e7144185631a38974827f65d986ebae17fa4706e2a26a25285cfabd480fa3bf0e8576a3881edb5b7d23b9d2dbec7b3386e96bf48c
SSDEEP

384:4ssfHBuztNHIMCtwYR3F4kGi0CCirwnsHbiqlR7mW39IJz0HImoorSBRLg:UfhQtBIMC+I14kGLYwQnmW3yyxrug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TqPackage8.dll

Files

TqPackage8.dll
.dll windows:4 windows x86 arch:x86

4fe60269d8027d1212e5488b44d37b7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
fwrite
_purecall
ftell
malloc
free
fseek
fread
fopen
fclose
strrchr
strncpy
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xlen@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

kernel32

DisableThreadLibraryCalls
CreateMutexA
GetLastError
ReleaseMutex
CloseHandle
GetFileAttributesExA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection

Exports

Exports

?TQFRead@@YAJPAXKK0@Z
?TqFCheck@@YA_NPBDW4FILETYPE@@@Z
?TqFClose@@YA?AW4TQPRESULT@@PAX@Z
?TqFDump@@YA?AW4TQPRESULT@@PBDAAPAXAAK@Z
?TqFGetLen@@YAJPAX@Z
?TqFGetVersion@@YAJXZ
?TqFIsEof@@YA_NPAX@Z
?TqFOpen@@YA?AW4TQPRESULT@@PBDAAPAX@Z
?TqFSeek@@YA_NPAXJW4TQSEEKMODE@@@Z
?TqFTell@@YAKPAX@Z
?TqFUndump@@YA?AW4TQPRESULT@@PAX@Z
?TqPackagesClose@@YAXPBD@Z
?TqPackagesOpen@@YA?AW4TQPRESULT@@PBD@Z

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fe60269d8027d1212e5488b44d37b7a

Headers

File Characteristics

Imports

msvcrt

msvcp60

kernel32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 460B

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 460B

.reloc
Size: 4KB - Virtual size: 1KB