37a52bc408d7c8ff589ea71bd8e3c8e0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

37a52bc408d7c8ff589ea71bd8e3c8e0N.exe
Size

21KB
MD5

37a52bc408d7c8ff589ea71bd8e3c8e0
SHA1

407a16ded5d799f7566d422e7ad0a414f969f69b
SHA256

5d74b1048a9c3a64b0207aa4e963479cb9ee9191d68ef425f7aa067676173ec8
SHA512

16fb2918d9582d535dee80ecd28bef47a5b12b0462a0aae8b48752269e0db142652d2e0b66e761f97aedbcbda0684326338616a6b645564f06d19e53f5b45c06
SSDEEP

384:9pIZD6sbGZASTw7FbsdnoGAwNvfI9kXKPpgAD:98ReNMlsdr3lIBRh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a52bc408d7c8ff589ea71bd8e3c8e0N.exe

Files

37a52bc408d7c8ff589ea71bd8e3c8e0N.exe
.dll windows:6 windows x64 arch:x64

3141cd978bdfd7b2f7664a2af78e7955

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kf5configcore

?findItem@KCoreConfigSkeleton@@QEBAPEAVKConfigSkeletonItem@@AEBVQString@@@Z
?items@KCoreConfigSkeleton@@QEBA?AV?$QList@PEAVKConfigSkeletonItem@@@@XZ
?getDefault@KConfigSkeletonItem@@QEBA?AVQVariant@@XZ
?isImmutable@KConfigSkeletonItem@@QEBA_NXZ
?setWriteFlags@KConfigSkeletonItem@@QEAAXV?$QFlags@W4WriteConfigFlag@KConfigBase@@@@@Z
?configChanged@KCoreConfigSkeleton@@QEAAXXZ
?staticMetaObject@KCoreConfigSkeleton@@2UQMetaObject@@B
?key@KConfigSkeletonItem@@QEBA?AVQString@@XZ

qt5qml

?toVariant@QJSValue@@QEBA?AVQVariant@@XZ
??0QJSValue@@QEAA@AEBV0@@Z
??1QJSValue@@QEAA@XZ
??0QJSValue@@QEAA@W4SpecialValue@0@@Z
??0QQmlPropertyMap@@AEAA@PEBUQMetaObject@@PEAVQObject@@@Z
?valueChanged@QQmlPropertyMap@@QEAAXAEBVQString@@AEBVQVariant@@@Z
?insert@QQmlPropertyMap@@QEAAXAEBVQString@@AEBVQVariant@@@Z
?value@QQmlPropertyMap@@QEBA?AVQVariant@@AEBVQString@@@Z
?qt_metacall@QQmlPropertyMap@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?staticMetaObject@QQmlPropertyMap@@2UQMetaObject@@B
?qt_metacast@QQmlPropertyMap@@UEAAPEAXPEBD@Z
??1QQmlPropertyMap@@UEAA@XZ

qt5core

??1Connection@QMetaObject@@QEAA@XZ
??1QByteArray@@QEAA@XZ
??0QString@@QEAA@AEBV0@@Z
??1QString@@QEAA@XZ
?append@QString@@QEAAAEAV1@AEBV1@@Z
?dispose@QListData@@SAXPEAUData@1@@Z
?begin@QListData@@QEBAPEAPEAXXZ
?end@QListData@@QEBAPEAPEAXXZ
?registerNormalizedType@QMetaType@@SAHAEBVQByteArray@@P6AXPEAX@ZP6APEAX1PEBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PEBUQMetaObject@@@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PEBV1@PEAPEAX01PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEBHPEBU3@@Z
??1QVariant@@QEAA@XZ
??0QVariant@@QEAA@AEBV0@@Z
?userType@QVariant@@QEBAHXZ
?constData@QVariant@@QEBAPEBXXZ
?convert@QVariant@@QEBA_NHPEAX@Z
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?normalizedType@QMetaObject@@SA?AVQByteArray@@PEBD@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z

vcruntime140

__std_exception_copy
__std_terminate
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
memset
__C_specific_handler
__current_exception
__current_exception_context

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_configure_narrow_argv
_execute_onexit_table
_initterm_e
_initterm
_cexit
_initialize_narrow_environment
terminate
_seh_filter_dll

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

kernel32

SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
IsProcessorFeaturePresent
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind

Exports

Exports

??0KConfigPropertyMap@@QEAA@PEAVKCoreConfigSkeleton@@PEAVQObject@@@Z
??1KConfigPropertyMap@@UEAA@XZ
??_7KConfigPropertyMap@@6B@
?isImmutable@KConfigPropertyMap@@QEBA_NAEBVQString@@@Z
?isNotify@KConfigPropertyMap@@QEBA_NXZ
?metaObject@KConfigPropertyMap@@UEBAPEBUQMetaObject@@XZ
?qt_metacall@KConfigPropertyMap@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@KConfigPropertyMap@@UEAAPEAXPEBD@Z
?qt_static_metacall@KConfigPropertyMap@@CAXPEAVQObject@@W4Call@QMetaObject@@HPEAPEAX@Z
?setNotify@KConfigPropertyMap@@QEAAX_N@Z
?staticMetaObject@KConfigPropertyMap@@2UQMetaObject@@B
?tr@KConfigPropertyMap@@SA?AVQString@@PEBD0H@Z
?trUtf8@KConfigPropertyMap@@SA?AVQString@@PEBD0H@Z
?updateValue@KConfigPropertyMap@@MEAA?AVQVariant@@AEBVQString@@AEBV2@@Z
?writeConfig@KConfigPropertyMap@@QEAAXXZ

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3141cd978bdfd7b2f7664a2af78e7955

Headers

DLL Characteristics

File Characteristics

Imports

kf5configcore

qt5qml

qt5core

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 712B

.pdata Size: 1024B - Virtual size: 732B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 112B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 712B

.pdata
Size: 1024B - Virtual size: 732B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 112B