990fe9d9244f76019f14c0816f1b5a0648ae0407fd7480398e0df8cbb347de3b

Sharing

Copy URL Twitter E-mail

General

Target

990fe9d9244f76019f14c0816f1b5a0648ae0407fd7480398e0df8cbb347de3b
Size

120KB
MD5

83f83de70ab12204203bb644b4c506ed
SHA1

ac3baf69e52267e41542d1963d4a2be2e3bef4c1
SHA256

990fe9d9244f76019f14c0816f1b5a0648ae0407fd7480398e0df8cbb347de3b
SHA512

cb055d50b936837cd1ed9d8b9df57c18b24e0305985adcb75bb98ae241e7238ff3906d537fd68b2344aeaa6febe1dff489fc67377d9747cc88e5e6b37e99f015
SSDEEP

768:7SW9cXTbOEg4gXVAxlgTvk8RME8FdAybXkDYlFtwkw+n7oZ9y6Dy6dpaz6f5f+9j:EUeurAHl/FEZUoyiG9G/IW2ug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
990fe9d9244f76019f14c0816f1b5a0648ae0407fd7480398e0df8cbb347de3b

Files

990fe9d9244f76019f14c0816f1b5a0648ae0407fd7480398e0df8cbb347de3b
.exe windows:4 windows x86 arch:x86

1b18d5d03acb92d75b74ed4cfbcfe4a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

qt5core

_Z9qBadAllocv
_ZN10QArrayData10deallocateEPS_jj
_ZN10QArrayData11shared_nullE
_ZN10QArrayData8allocateEjjj6QFlagsINS_16AllocationOptionEE
_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QTranslator4loadERK7QStringS2_S2_S2_
_ZN11QTranslatorC1EP7QObject
_ZN12QMapDataBase10createDataEv
_ZN12QMapDataBase10createNodeEiiP12QMapNodeBaseb
_ZN12QMapDataBase11shared_nullE
_ZN12QMapDataBase18recalcMostLeftNodeEv
_ZN12QMapDataBase8freeDataEPS_
_ZN12QMapDataBase8freeTreeEP12QMapNodeBasei
_ZN16QCoreApplication12setAttributeEN2Qt20ApplicationAttributeEb
_ZN16QCoreApplication14addLibraryPathERK7QString
_ZN16QCoreApplication17installTranslatorEP11QTranslator
_ZN16QCoreApplication18applicationDirPathEv
_ZN16QCoreApplication9translateEPKcS1_S1_i
_ZN4QDirC1ERK7QString
_ZN4QDirD1Ev
_ZN6QTimer10singleShotEiPK7QObjectPKc
_ZN7QLocale6systemEv
_ZN7QLocaleD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10startTimerEiN2Qt9TimerTypeE
_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString15toLatin1_helperERKS_
_ZN7QString16fromAscii_helperEPKci
_ZN7QString6appendERKS_
_ZN7QString6removeEii
_ZN7QString7sprintfEPKcz
_ZN7QStringaSERKS_
_ZN8QVariantD1Ev
_ZN9QListData6detachEi
_ZN9QListData7disposeEPNS_4DataE
_ZN9QSettingsC1ERK7QStringNS_6FormatEP7QObject
_ZN9QSettingsD1Ev
_ZNK11QMetaObject2trEPKcS1_i
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK4QDir6existsEv
_ZNK7QLocale7countryEv
_ZNK7QLocale8languageEv
_ZNK7QObject10objectNameEv
_ZNK7QString10startsWithERKS_N2Qt15CaseSensitivityE
_ZNK7QString3argERKS_i5QChar
_ZNK7QString5splitERKS_NS_13SplitBehaviorEN2Qt15CaseSensitivityE
_ZNK8QVariant8toStringEv
_ZNK9QSettings5valueERK7QStringRK8QVariant

qt5gui

_ZN5QFont12setPointSizeEi
_ZN5QFontC1Ev
_ZN5QFontD1Ev

qt5widgets

_ZN11QMessageBoxC1ENS_4IconERK7QStringS3_6QFlagsINS_14StandardButtonEEP7QWidgetS4_IN2Qt10WindowTypeEE
_ZN12QApplication4execEv
_ZN12QApplication7desktopEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN6QLabel12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE
_ZN6QLabel7setTextERK7QString
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPl
_ZN7QWidget11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QWidget11qt_metacastEPKc
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11setGeometryERK5QRect
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget12setAttributeEN2Qt15WidgetAttributeEb
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget14showFullScreenEv
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget16contextMenuEventEP17QContextMenuEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget16staticMetaObjectE
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget4hideEv
_ZN7QWidget4showEv
_ZN7QWidget5closeEv
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget6updateEv
_ZN7QWidget7setFontERK5QFont
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC2EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidgetD2Ev
_ZN9QLineEdit13returnPressedEv
_ZN9QLineEdit16staticMetaObjectE
_ZN9QLineEdit5clearEv
_ZN9QLineEditC1EP7QWidget
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK9QLineEdit4textEv
_ZThn8_NK7QWidget10redirectedEP6QPoint
_ZThn8_NK7QWidget11initPainterEP8QPainter
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget13sharedPainterEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv

libgcc_s_dw2-1

_Unwind_Resume
__deregister_frame_info
__register_frame_info

kernel32

CancelIo
CloseHandle
CreateEventW
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FormatMessageW
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetOverlappedResult
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalFree
QueryPerformanceCounter
ReadFile
ResetEvent
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memset
signal
strcmp
strlen
strncmp
strncpy
strstr
strtol
vfprintf
wcscmp

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA

shell32

CommandLineToArgvW

libstdc++-6

_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPv
_Znaj
_Znwj
__cxa_begin_catch
__cxa_end_catch
__cxa_guard_abort
__cxa_guard_acquire
__cxa_guard_release
__cxa_rethrow
__gxx_personality_v0

Exports

Exports

hid_close
hid_enumerate
hid_error
hid_exit
hid_free_enumeration
hid_get_feature_report
hid_get_indexed_string
hid_get_manufacturer_string
hid_get_product_string
hid_get_serial_number_string
hid_init
hid_open
hid_open_path
hid_read
hid_read_timeout
hid_send_feature_report
hid_set_nonblocking
hid_write

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 537B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b18d5d03acb92d75b74ed4cfbcfe4a8

Headers

File Characteristics

Imports

qt5core

qt5gui

qt5widgets

libgcc_s_dw2-1

kernel32

msvcrt

setupapi

shell32

libstdc++-6

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 41KB

.data Size: 512B - Virtual size: 108B

.rdata Size: 4KB - Virtual size: 4KB

.eh_fram Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 1KB

.edata Size: 1024B - Virtual size: 537B

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 52KB - Virtual size: 51KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 41KB - Virtual size: 41KB

.data
Size: 512B - Virtual size: 108B

.rdata
Size: 4KB - Virtual size: 4KB

.eh_fram
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 1024B - Virtual size: 537B

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 52KB - Virtual size: 51KB

.reloc
Size: 2KB - Virtual size: 2KB