C:\ws\GitEverest\App\UI\dist\Debug\StyleGuideApp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8761415f1c45bc66a299d887b260671c6c618458a9044fbc4972488f0c42d609.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8761415f1c45bc66a299d887b260671c6c618458a9044fbc4972488f0c42d609.exe
Resource
win10v2004-20240611-en
General
-
Target
8761415f1c45bc66a299d887b260671c6c618458a9044fbc4972488f0c42d609
-
Size
143KB
-
MD5
dea0f151768ed8e84a279c854479de37
-
SHA1
91a45d7056d30a3f957e538bf50f139355c1513f
-
SHA256
8761415f1c45bc66a299d887b260671c6c618458a9044fbc4972488f0c42d609
-
SHA512
64f8203d0316fe1b7c74b3d3e471100d8fa072d7282c2ae399e5d70e5f3359775d530e08138c9438f47b6e335c099a6aaca80e61c2402f8684cf2f0cd727aade
-
SSDEEP
3072:5I+7e1mWo9N40333n43333d+s3z8gjZ63F4JLac14:Fy1mWU4R+s3AgjYpX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8761415f1c45bc66a299d887b260671c6c618458a9044fbc4972488f0c42d609
Files
-
8761415f1c45bc66a299d887b260671c6c618458a9044fbc4972488f0c42d609.exe windows:6 windows x64 arch:x64
66ddd4ab655b7901d1b6c3d91fbe1fb9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
qt5quickcontrols2d
?setStyle@QQuickStyle@@SAXAEBVQString@@@Z
qt5qmld
?setContextProperty@QQmlContext@@QEAAXAEBVQString@@AEBVQVariant@@@Z
?setContextProperty@QQmlContext@@QEAAXAEBVQString@@PEAVQObject@@@Z
?load@QQmlApplicationEngine@@QEAAXAEBVQUrl@@@Z
??1QQmlApplicationEngine@@UEAA@XZ
??0QQmlApplicationEngine@@QEAA@PEAVQObject@@@Z
?rootContext@QQmlEngine@@QEBAPEAVQQmlContext@@XZ
??0QQmlDebuggingEnabler@@QEAA@_N@Z
qt5guid
?exec@QGuiApplication@@SAHXZ
?clipboard@QGuiApplication@@SAPEAVQClipboard@@XZ
??1QGuiApplication@@UEAA@XZ
??0QGuiApplication@@QEAA@AEAHPEAPEADH@Z
?setText@QClipboard@@QEAAXAEBVQString@@W4Mode@1@@Z
qt5cored
??YQString@@QEAAAEAV0@AEBV0@@Z
?fromUtf8@QString@@SA?AV1@PEBDH@Z
?toInt@QString@@QEBAHPEA_NH@Z
??0QString@@QEAA@PEBD@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??0QObject@@QEAA@PEAV0@@Z
??1QObject@@UEAA@XZ
?setAttribute@QCoreApplication@@SAXW4ApplicationAttribute@Qt@@_N@Z
?instance@QCoreApplication@@SAPEAV1@XZ
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
?translate@QCoreApplication@@SA?AVQString@@PEBD00H@Z
??0QCommandLineOption@@QEAA@AEBVQStringList@@AEBVQString@@11@Z
??0QCommandLineOption@@QEAA@AEBV0@@Z
??1QCommandLineOption@@QEAA@XZ
??0QCommandLineParser@@QEAA@XZ
??1QCommandLineParser@@QEAA@XZ
?addOptions@QCommandLineParser@@QEAA_NAEBV?$QList@VQCommandLineOption@@@@@Z
??0QString@@QEAA@$$QEAV0@@Z
?addHelpOption@QCommandLineParser@@QEAA?AVQCommandLineOption@@XZ
?process@QCommandLineParser@@QEAAXAEBVQCoreApplication@@@Z
?value@QCommandLineParser@@QEBA?AVQString@@AEBV2@@Z
??1QVariant@@QEAA@XZ
??0QVariant@@QEAA@H@Z
??0QUrl@@QEAA@AEBVQString@@W4ParsingMode@0@@Z
??1QUrl@@QEAA@XZ
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?shared_null@QListData@@2UData@1@B
?staticMetaObject@QObject@@2UQMetaObject@@B
?qRegisterResourceData@@YA_NHPEBE00@Z
?qUnregisterResourceData@@YA_NHPEBE00@Z
??0QString@@QEAA@AEBV0@@Z
??1QString@@QEAA@XZ
??0QString@@QEAA@VQLatin1String@@@Z
??0QString@@QEAA@XZ
?end@QListData@@QEBAPEAPEAXXZ
?detach@QListData@@QEAAPEAUData@1@H@Z
?begin@QListData@@QEBAPEAPEAXXZ
?append@QListData@@QEAAPEAPEAXXZ
?dispose@QListData@@SAXPEAUData@1@@Z
?dispose@QListData@@QEAAXXZ
?realloc@QListData@@QEAAXH@Z
?detach_grow@QListData@@QEAAPEAUData@1@PEAHH@Z
?addVersionOption@QCommandLineParser@@QEAA?AVQCommandLineOption@@XZ
msvcp140d
?_Debug_message@std@@YAXPEB_W0I@Z
vcruntime140d
__C_specific_handler
_CxxThrowException
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_LoadLibraryExW
memcpy
ucrtbased
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_free_dbg
__stdio_common_vsprintf_s
_wmakepath_s
_wsplitpath_s
wcscpy_s
_cexit
_crt_at_quick_exit
__p___argv
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_CrtDbgReportW
_CrtDbgReport
malloc
_callnewh
terminate
strlen
strcmp
__p___argc
_set_fmode
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
__setusermatherr
_set_app_type
_crt_atexit
_seh_filter_exe
kernel32
RaiseException
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetProcAddress
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 354B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 283B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 733B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ