4995145f28ba8a50bacb49812ed44e8dee12d2564db7d3d68965a934cc1f7de6

Sharing

Copy URL Twitter E-mail

General

Target

4995145f28ba8a50bacb49812ed44e8dee12d2564db7d3d68965a934cc1f7de6
Size

138KB
MD5

1b95161bd1d2d5fdc586e11125ce682a
SHA1

89b0b58770f29459daf52bf4a0894b5c6cc8b175
SHA256

4995145f28ba8a50bacb49812ed44e8dee12d2564db7d3d68965a934cc1f7de6
SHA512

6904fd0e1ac78c34f7958c4f58fb89dea3950ae0475b16144b100b8ca1e678e1ab2e2c2045fb7c72ecf74ef950c2ffcb5b2b6e0b14d058cc4f0525d6b89b3fad
SSDEEP

3072:KAZZ+beAR8e3eT8gdzIF0oDUstZwUPiZ:K2+beqT3eTqDUqZwUPiZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4995145f28ba8a50bacb49812ed44e8dee12d2564db7d3d68965a934cc1f7de6

Files

4995145f28ba8a50bacb49812ed44e8dee12d2564db7d3d68965a934cc1f7de6
.exe .js windows:4 windows x86 arch:x86 polyglot

583b2bf84b312050bdf1db7799233591

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateSemaphoreA
ExitProcess
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject

mingwm10

__mingwthr_key_dtor

msvcrt

_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fputc
fputs
free
fwrite
malloc
realloc
signal
sprintf
strcmp
strcpy

libgcc_s_dw2-1

_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__emutls_get_address
__register_frame_info

qtcore4

_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_Z5qFreePv
_Z7qMemSetPvij
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_Z9qBadAllocv
_ZN10QByteArray7reallocEi
_ZN11QVectorData10reallocateEPS_iii
_ZN11QVectorData4freeEPS_i
_ZN11QVectorData8allocateEii
_ZN4QUrlC1ERK7QString
_ZN4QUrlC1Ev
_ZN4QUrlD1Ev
_ZN4QUrlaSERKS_
_ZN5QFile11setFileNameERK7QString
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFile5closeEv
_ZN5QFileC1Ev
_ZN5QFileD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11deleteLaterEv
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyEPKc
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QString11shared_nullE
_ZN7QString14fromWCharArrayEPKwi
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString9fromAsciiEPKci
_ZN7QStringaSERKS_
_ZN8QVariantD1Ev
_ZN9QIODevice7readAllEv
_ZNK11QMetaObject2trEPKcS1_
_ZNK11QMetaObject4castEP7QObject
_ZNK4QUrl8toStringE6QFlagsINS_16FormattingOptionEE
_ZNK7QObject6senderEv
_ZNK7QString11toLocal8BitEv
_ZNK7QString3argERKS_iRK5QChar
_ZNK7QString3argExiiRK5QChar

qtgui4

_ZN11QMainWindow10addToolBarERK7QString
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow30setUnifiedTitleAndToolBarOnMacEb
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN12QKeySequenceC1Eiiii
_ZN12QKeySequenceD1Ev
_ZN5QIconD1Ev
_ZN5QMenu9addActionERK7QStringPK7QObjectPKcRK12QKeySequence
_ZN7QAction12setCheckableEb
_ZN7QAction7setIconERK5QIcon
_ZN7QAction7setTextERK7QString
_ZN7QActionC1EP7QObject
_ZN7QActionC1ERK7QStringP7QObject
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10fontChangeERK5QFont
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11styleChangeER6QStyle
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget12setAttributeEN2Qt15WidgetAttributeEb
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13enabledChangeEb
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13paletteChangeERK8QPalette
_ZN7QWidget13setSizePolicyE11QSizePolicy
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14languageChangeEv
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget22windowActivationChangeEb
_ZN7QWidget8setFocusEN2Qt11FocusReasonE
_ZN7QWidget8winEventEP6tagMSGPl
_ZN7QWidget9addActionEP7QAction
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9showEventEP10QShowEvent
_ZN8QMenuBar7addMenuERK7QString
_ZN8QToolBar9addWidgetEP7QWidget
_ZN9QLineEdit7setTextERK7QString
_ZN9QLineEditC1EP7QWidget
_ZN9QTextEdit12setPlainTextERK7QString
_ZN9QTextEditC1EP7QWidget
_ZNK11QMainWindow7menuBarEv
_ZNK6QStyle12standardIconENS_14StandardPixmapEPK12QStyleOptionPK7QWidget
_ZNK7QAction9isCheckedEv
_ZNK7QWidget10sizePolicyEv
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget5getDCEv
_ZNK7QWidget5styleEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK7QWidget9releaseDCEP5HDC__
_ZNK9QLineEdit4textEv
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget5getDCEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
_ZThn8_NK7QWidget9releaseDCEP5HDC__

qtnetwork4

_ZN13QNetworkReply16staticMetaObjectE
_ZN15QNetworkRequestC1ERK4QUrl
_ZN15QNetworkRequestD1Ev
_ZN20QNetworkProxyFactory25setUseSystemConfigurationEb
_ZN21QNetworkAccessManager3getERK15QNetworkRequest

qtwebkit4

_ZN8QWebView4loadERK4QUrl
_ZN8QWebViewC1EP7QWidget
_ZN9QWebFrame18evaluateJavaScriptERK7QString
_ZNK8QWebPage20networkAccessManagerEv
_ZNK8QWebPage9mainFrameEv
_ZNK8QWebView10pageActionEN8QWebPage9WebActionE
_ZNK8QWebView3urlEv
_ZNK8QWebView4pageEv
_ZNK8QWebView5titleEv

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 128B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

583b2bf84b312050bdf1db7799233591

Headers

File Characteristics

Imports

kernel32

mingwm10

msvcrt

libgcc_s_dw2-1

qtcore4

qtgui4

qtnetwork4

qtwebkit4

Sections

.text Size: 40KB - Virtual size: 40KB

.data Size: 19KB - Virtual size: 18KB

.rdata Size: 68KB - Virtual size: 67KB

.bss Size: - Virtual size: 128B

.idata Size: 9KB - Virtual size: 9KB

.text
Size: 40KB - Virtual size: 40KB

.data
Size: 19KB - Virtual size: 18KB

.rdata
Size: 68KB - Virtual size: 67KB

.bss
Size: - Virtual size: 128B

.idata
Size: 9KB - Virtual size: 9KB