884b16d4214585338e0bc733b8f8d50dbb4f1be147ee6269b774581d40f7cb32[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

884b16d4214585338e0bc733b8f8d50dbb4f1be147ee6269b774581d40f7cb32.exe
Size

170KB
MD5

e3dfe2762c642c9471abfbea890412e0
SHA1

adf165ada8f83b088561f7564455a63f99b63c80
SHA256

884b16d4214585338e0bc733b8f8d50dbb4f1be147ee6269b774581d40f7cb32
SHA512

20e0b50b4939d88bce46eda8d983cb3d3bc22cbbcbc06ad9981e9cd02ba9c4b5bf90668ddd4bda909176f33cd2452ce3c46f61866314e97d3fac74d0da4688db
SSDEEP

3072:ZhZdHbjx3D9EPs6W99hM1oR5uD4PphvuW7auAeYSHvSwJQFLO:ZhZdHXlD9ys/9HVC4PrvuW71YSPSwJQV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
884b16d4214585338e0bc733b8f8d50dbb4f1be147ee6269b774581d40f7cb32.exe

Files

884b16d4214585338e0bc733b8f8d50dbb4f1be147ee6269b774581d40f7cb32.exe
.dll windows:6 windows x64 arch:x64

09bbba4999a5731b6621afe6b79ffcf9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

qt6gui

?sharedPainter@QPaintDevice@@MEBAPEAVQPainter@@XZ
?redirected@QPaintDevice@@MEBAPEAV1@PEAVQPoint@@@Z
?initPainter@QPaintDevice@@MEBAXPEAVQPainter@@@Z
?metric@QImage@@MEBAHW4PaintDeviceMetric@QPaintDevice@@@Z
?paintEngine@QImage@@UEBAPEAVQPaintEngine@@XZ
?devType@QImage@@UEBAHXZ
?fill@QImage@@QEAAXW4GlobalColor@Qt@@@Z
?setPixelColor@QImage@@QEAAXHHAEBVQColor@@@Z
?pixelColor@QImage@@QEBA?AVQColor@@HH@Z
??4QImage@@QEAAAEAV0@AEBV0@@Z
??0QImage@@QEAA@$$QEAV0@@Z
??0QImage@@QEAA@AEBV0@@Z
??0QImage@@QEAA@HHW4Format@0@@Z
??0QImage@@QEAA@XZ
?setBlue@QColor@@QEAAXH@Z
?setGreen@QColor@@QEAAXH@Z
?setRed@QColor@@QEAAXH@Z
?blue@QColor@@QEBAHXZ
?green@QColor@@QEBAHXZ
?qt_metacast@QImageIOPlugin@@UEAAPEAXPEBD@Z
?qt_metacall@QImageIOPlugin@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?staticMetaObject@QImageIOPlugin@@2UQMetaObject@@B
??1QImage@@UEAA@XZ
??4QImage@@QEAAAEAV0@$$QEAV0@@Z
?isNull@QImage@@QEBA_NXZ
??0QImageIOHandler@@QEAA@XZ
??1QImageIOHandler@@UEAA@XZ
?device@QImageIOHandler@@QEBAPEAVQIODevice@@XZ
?setFormat@QImageIOHandler@@QEBAXAEBVQByteArray@@@Z
?write@QImageIOHandler@@UEAA_NAEBVQImage@@@Z
?setOption@QImageIOHandler@@UEAAXW4ImageOption@1@AEBVQVariant@@@Z
?currentImageRect@QImageIOHandler@@UEBA?AVQRect@@XZ
?setDevice@QImageIOHandler@@QEAAXPEAVQIODevice@@@Z
?setFormat@QImageIOHandler@@QEAAXAEBVQByteArray@@@Z
??0QImageIOPlugin@@QEAA@PEAVQObject@@@Z
??1QImageIOPlugin@@UEAA@XZ
??0QColor@@QEAA@XZ
??0QColor@@QEAA@W4GlobalColor@Qt@@@Z
?alpha@QColor@@QEBAHXZ
?setAlpha@QColor@@QEAAXH@Z
?red@QColor@@QEBAHXZ

qt6core

??6QDebug@@QEAAAEAV0@PEBD@Z
??1QDebug@@QEAA@XZ
?setHeight@QSize@@QEAAXH@Z
?setWidth@QSize@@QEAAXH@Z
?peek@QIODevice@@QEAA?AVQByteArray@@_J@Z
?read@QIODevice@@QEAA?AVQByteArray@@_J@Z
??1QObject@@UEAA@XZ
??0QObject@@QEAA@PEAV0@@Z
?append@QByteArray@@QEAAAEAV1@AEBV1@@Z
?constData@QByteArray@@QEBAPEBDXZ
?data@QByteArray@@QEAAPEADXZ
?isEmpty@QByteArray@@QEBA_NXZ
??4QByteArray@@QEAAAEAV0@$$QEAV0@@Z
??0QByteArray@@QEAA@XZ
?deallocate@QArrayData@@SAXPEAU1@_J1@Z
?allocate@QArrayData@@SAPEAXPEAPEAU1@_J11W4AllocationOption@1@@Z
?critical@QMessageLogger@@QEBA?AVQDebug@@XZ
??0QMessageLogger@@QEAA@PEBDH0@Z
?qBadAlloc@@YAXXZ
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
?staticMetaObject@QObject@@2UQMetaObject@@B
??0QByteArray@@QEAA@PEBD_J@Z
??1QByteArray@@QEAA@XZ
??0QSize@@QEAA@XZ
??0QVariant@@QEAA@XZ
??0QVariant@@QEAA@_N@Z
??0QVariant@@QEAA@VQSize@@@Z
?castHelper@QByteArrayView@@CAPEBDPEBD@Z
?size@QByteArrayView@@QEBA_JXZ
?data@QByteArrayView@@QEBAPEBDXZ
?data@QByteArray@@QEBAPEBDXZ
?size@QByteArray@@QEBA_JXZ
?isNull@QByteArray@@QEBA_NXZ
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

longjmp
memcpy
memset
__C_specific_handler
__intrinsic_setjmp
memcmp
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
_CxxThrowException

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

fread
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-math-l1-1-0

floor
pow

api-ms-win-crt-runtime-l1-1-0

abort
_cexit
_crt_atexit
_execute_onexit_table
_initterm_e
_initterm
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll

kernel32

TerminateProcess
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive

Exports

Exports

qt_plugin_instance
qt_plugin_query_metadata_v2

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmetad
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09bbba4999a5731b6621afe6b79ffcf9

Headers

DLL Characteristics

File Characteristics

Imports

qt6gui

qt6core

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 113KB - Virtual size: 112KB

.rdata Size: 47KB - Virtual size: 46KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 6KB - Virtual size: 6KB

.qtmetad Size: 512B - Virtual size: 100B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 316B

.text
Size: 113KB - Virtual size: 112KB

.rdata
Size: 47KB - Virtual size: 46KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 6KB - Virtual size: 6KB

.qtmetad
Size: 512B - Virtual size: 100B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 316B