Static task
static1
Behavioral task
behavioral1
Sample
c4e0d267eb9c0958e611a23c206ccdb62807b20d17622780da59f36d60deeb45.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4e0d267eb9c0958e611a23c206ccdb62807b20d17622780da59f36d60deeb45.exe
Resource
win10v2004-20240704-en
General
-
Target
c4e0d267eb9c0958e611a23c206ccdb62807b20d17622780da59f36d60deeb45
-
Size
77KB
-
MD5
a4f2885e337039cc853a6f178ec0247f
-
SHA1
63c8974468c6786c7ab2813548d055ce4e91d617
-
SHA256
c4e0d267eb9c0958e611a23c206ccdb62807b20d17622780da59f36d60deeb45
-
SHA512
ff91c0f8b96a0bfd7e831e7fba5bde361a942dfae337cab9cd082a3a629d7d171ac68bb05f85ca9fe5f3b7e7f40ab993e5d003fe84ec78be714d99bafe305dcd
-
SSDEEP
1536:9sG2obmxxKj5CchnPyUq8RaAI2Nk2tgPOAscW2:9EoDPyzCkHOyW2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4e0d267eb9c0958e611a23c206ccdb62807b20d17622780da59f36d60deeb45
Files
-
c4e0d267eb9c0958e611a23c206ccdb62807b20d17622780da59f36d60deeb45.exe windows:4 windows x86 arch:x86
b5cf42e6fc7cef0c3e4858f233f92d48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
opencl
clBuildProgram
clCreateBuffer
clCreateCommandQueue
clCreateContext
clCreateKernel
clCreateProgramWithSource
clEnqueueNDRangeKernel
clEnqueueReadBuffer
clEnqueueWriteBuffer
clFinish
clGetDeviceIDs
clGetDeviceInfo
clGetKernelWorkGroupInfo
clGetPlatformIDs
clGetProgramBuildInfo
clSetKernelArg
qt5core
_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_Z9qBadAllocv
_ZN10QArrayData10deallocateEPS_jj
_ZN10QArrayData11shared_nullE
_ZN10QArrayData8allocateEjjj6QFlagsINS_16AllocationOptionEE
_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QTextStream7readAllEv
_ZN11QTextStreamC1EP9QIODevice
_ZN11QTextStreamD1Ev
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEc
_ZN11QTextStreamlsEf
_ZN11QTextStreamlsEi
_ZN11QTextStreamlsEj
_ZN11QTextStreamlsEy
_ZN16QCoreApplication9translateEPKcS1_S1_i
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFileC1ERK7QString
_ZN5QFileD1Ev
_ZN5QTime5startEv
_ZN6QDebug9putStringEPK5QCharj
_ZN6QDebugD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QObject11qt_metacastEPKc
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString18toLocal8Bit_helperEPK5QChari
_ZN7QString7sprintfEPKcz
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK14QMessageLogger5debugEPKcz
_ZNK14QMessageLogger5debugEv
_ZNK14QMessageLogger7warningEPKcz
_ZNK5QFile8fileNameEv
_ZNK5QTime7elapsedEv
_ZNK7QObject10objectNameEv
qt5gui
_ZN12QPainterPath7addRectERK6QRectF
_ZN12QPainterPathC1Ev
_ZN12QPainterPathD1Ev
_ZN6QBrushC1EN2Qt11GlobalColorENS0_10BrushStyleE
_ZN6QBrushD1Ev
_ZN6QImage4fillEN2Qt11GlobalColorE
_ZN6QImage8scanLineEi
_ZN6QImageC1ERK5QSizeNS_6FormatE
_ZN6QImageC1ERK7QStringPKc
_ZN6QImageC2ERKS_
_ZN6QImageC2EiiNS_6FormatE
_ZN6QImageD1Ev
_ZN6QImageD2Ev
_ZN7QPixmap9fromImageERK6QImage6QFlagsIN2Qt19ImageConversionFlagEE
_ZN7QPixmapD1Ev
_ZN8QPainter8fillPathERK12QPainterPathRK6QBrush
_ZN8QPainterC1EP12QPaintDevice
_ZN8QPainterD1Ev
_ZNK12QPaintDevice10redirectedEP6QPoint
_ZNK12QPaintDevice11initPainterEP8QPainter
_ZNK12QPaintDevice13sharedPainterEv
_ZNK6QImage11isGrayscaleEv
_ZNK6QImage11paintEngineEv
_ZNK6QImage22convertToFormat_helperENS_6FormatE6QFlagsIN2Qt19ImageConversionFlagEE
_ZNK6QImage5depthEv
_ZNK6QImage5widthEv
_ZNK6QImage6heightEv
_ZNK6QImage6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK6QImage7devTypeEv
_ZNK7QPixmap4sizeEv
qt5widgets
_ZN10QBoxLayout10setSpacingEi
_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayout10setSpacingEi
_ZN11QGridLayout7addItemEP11QLayoutItemiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayout9addWidgetEP7QWidgetiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayoutC1EP7QWidget
_ZN11QLayoutItemD2Ev
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QSizePolicy14setControlTypeENS_11ControlTypeE
_ZN11QVBoxLayoutC1EP7QWidget
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN6QLabel7setTextERK7QString
_ZN6QLabel9setPixmapERK7QPixmap
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QLayout18setContentsMarginsEiiii
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPl
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget12setFixedSizeERK5QSize
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget4showEv
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZTV11QSpacerItem
_ZThn8_NK7QWidget10redirectedEP6QPoint
_ZThn8_NK7QWidget11initPainterEP8QPainter
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget13sharedPainterEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
libgcc_s_dw2-1
_Unwind_Resume
__deregister_frame_info
__register_frame_info
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalFree
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
atan
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memset
signal
strcmp
strlen
strncmp
vfprintf
shell32
CommandLineToArgvW
libstdc++-6
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPv
_Znaj
_Znwj
__cxa_begin_catch
__cxa_end_catch
__cxa_pure_virtual
__cxa_rethrow
__cxa_throw_bad_array_new_length
__gxx_personality_v0
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE