Static task
static1
Behavioral task
behavioral1
Sample
nagogy-builder.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
nagogy-builder.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
nagogy-builder.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
nagogy-builder.exe
Resource
win11-20240426-en
General
-
Target
nagogy-builder.exe
-
Size
56KB
-
MD5
78ee9dbf3f652b94518d0c34e8970dbf
-
SHA1
acf568e3f31eea94404a6ae5b4c1d240b81e90d7
-
SHA256
4ba6af3f221314ebfed5bbc3fa68cec3a02b7c88b398266a3702200d87f7da2c
-
SHA512
528d640c043844e6db2dde44e16cbec743304d28d59f29719ac77dd841433039ca1664bbda81f6ad49d95abccf9555fd61975fa294e603ee626391a600c87055
-
SSDEEP
1536:0Heja7R8jd/Cy6IraIvvmjm+OSa4bT5m:F6y6T5ijS9T5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource nagogy-builder.exe
Files
-
nagogy-builder.exe.exe windows:4 windows x64 arch:x64
5a69a0fee6a2a25607c96d1fabd6d32f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
qt6core
_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_Z9qBadAllocv
_ZN10QArrayData19reallocateUnalignedEPS_PvxxNS_16AllocationOptionE
_ZN10QArrayData8allocateEPPS_xxxNS_16AllocationOptionE
_ZN10QJsonArray6appendERK10QJsonValue
_ZN10QJsonArray6detachEx
_ZN10QJsonArrayD1Ev
_ZN10QJsonValueC1ERK10QJsonArray
_ZN10QJsonValueC1ERK11QJsonObject
_ZN10QJsonValueC1ERK7QString
_ZN10QJsonValueD1Ev
_ZN11QFileDevice5closeEv
_ZN11QJsonObjectC1Ev
_ZN11QJsonObjectD1Ev
_ZN11QJsonObjectixERK7QString
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEc
_ZN13QJsonDocument8fromJsonERK10QByteArrayP15QJsonParseError
_ZN13QJsonDocumentC1ERK11QJsonObject
_ZN13QJsonDocumentD1Ev
_ZN13QJsonValueRefaSERK10QJsonValue
_ZN16QCoreApplication9translateEPKcS1_S1_i
_ZN18QJsonValueConstRef14concreteStringES_RK7QString
_ZN5QFile4openE6QFlagsIN13QIODeviceBase12OpenModeFlagEE
_ZN5QFileC1ERK7QString
_ZN5QFileD1Ev
_ZN6QDebug9putStringEPK5QChary
_ZN6QDebugD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject13setObjectNameE14QAnyStringView
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QString6_emptyE
_ZN7QString8fromUtf8E14QByteArrayView
_ZN9QIODevice5writeERK10QByteArray
_ZN9QIODevice7readAllEv
_ZN9QtPrivate12equalStringsE11QStringViewS0_
_ZN9QtPrivate14compareStringsE11QStringViewS0_N2Qt15CaseSensitivityE
_ZNK10QJsonArray4sizeEv
_ZNK11QJsonObject8containsERK7QString
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK13QJsonDocument6objectEv
_ZNK13QJsonDocument6toJsonENS_10JsonFormatE
_ZNK13QJsonDocument8isObjectEv
_ZNK13QJsonValueRef7toArrayEv
_ZNK13QJsonValueRef8toObjectEv
_ZNK14QMessageLogger5debugEv
_ZNK14QMessageLogger7warningEv
_ZNK14QMessageLogger8criticalEv
_ZNK15QJsonParseError11errorStringEv
_ZNK5QFile6existsEv
_ZNK7QObject10objectNameEv
_ZNK7QString5splitE5QChar6QFlagsIN2Qt18SplitBehaviorFlagsEENS2_15CaseSensitivityE
_ZlsR11QDataStreamRK7QString
_ZrsR11QDataStreamR7QString
qt_version_tag_6_8
qt6network
_ZN12QHostAddressC1ENS_14SpecialAddressE
_ZN12QHostAddressD1Ev
qt6websockets
_ZN10QWebSocket16staticMetaObjectE
_ZN10QWebSocket19textMessageReceivedERK7QString
_ZN16QWebSocketServer13newConnectionEv
_ZN16QWebSocketServer16staticMetaObjectE
_ZN16QWebSocketServer5closeEv
_ZN16QWebSocketServer6listenERK12QHostAddresst
_ZN16QWebSocketServerC1ERK7QStringNS_7SslModeEP7QObject
_ZNK16QWebSocketServer11errorStringEv
qt6widgets
_ZN10QBoxLayout9addLayoutEP7QLayouti
_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE
_ZN10QStatusBarC1EP7QWidget
_ZN11QHBoxLayoutC1Ev
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow12setStatusBarEP10QStatusBar
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QPushButtonC1EP7QWidget
_ZN11QPushButtonC1ERK7QStringP7QWidget
_ZN11QToolButtonC1EP7QWidget
_ZN11QVBoxLayoutC1Ev
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN12QProgressBar8setValueEi
_ZN12QProgressBarC1EP7QWidget
_ZN12QTableWidget14setColumnCountEi
_ZN12QTableWidget25setHorizontalHeaderLabelsERK5QListI7QStringE
_ZN12QTableWidget7setItemEiiP16QTableWidgetItem
_ZN12QTableWidget9insertRowEi
_ZN12QTableWidgetC1EP7QWidget
_ZN14QStackedWidget15setCurrentIndexEi
_ZN14QStackedWidget9addWidgetEP7QWidget
_ZN14QStackedWidgetC1EP7QWidget
_ZN15QAbstractButton16staticMetaObjectE
_ZN15QAbstractButton7clickedEb
_ZN15QAbstractButton7setTextERK7QString
_ZN16QTableWidgetItemC1ERK7QStringi
_ZN6QFrame13setFrameShapeENS_5ShapeE
_ZN6QFrame14setFrameShadowENS_6ShadowE
_ZN6QFrameC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QLabel7setTextERK7QString
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QLabelC1ERK7QStringP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP11QEnterEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPx
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11setGeometryERK5QRect
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13setStyleSheetERK7QString
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget4showEv
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9setLayoutEP7QLayout
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN9QCheckBoxC1EP7QWidget
_ZNK12QTableWidget8rowCountEv
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZThn16_NK7QWidget10redirectedEP6QPoint
_ZThn16_NK7QWidget11initPainterEP8QPainter
_ZThn16_NK7QWidget11paintEngineEv
_ZThn16_NK7QWidget13sharedPainterEv
_ZThn16_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn16_NK7QWidget7devTypeEv
libgcc_s_seh-1
_Unwind_Resume
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetLastError
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LocalFree
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_fmode
_initterm
_ismbblead
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memmove
signal
strcmp
strlen
strncmp
vfprintf
shell32
CommandLineToArgvW
libstdc++-6
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPvy
_Znay
_Znwy
__cxa_throw_bad_array_new_length
__gxx_personality_seh0
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qtversi Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 384B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ